8738aaa84d1057047ee5743483807cf1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8738aaa84d1057047ee5743483807cf1_JaffaCakes118
Size

193KB
MD5

8738aaa84d1057047ee5743483807cf1
SHA1

1499e0a466ef088df389e8fd63ffa7d40f9fc522
SHA256

1a5f48fb8b8ef872bba6c58dab32920c5ec852bbb111ea4b58a3ee02c6238708
SHA512

36ea3886d5b302cfd8c6123713ab1cd5f6fdac8686937a205abdc31822a3033acce6dc9abfc5dea2f2d0375961e140b35df03b04e468c65a0fc1019d718cf5dc
SSDEEP

3072:KsAXHS2ic6CfgRNdCmfbNXfZ0YLbZ25be8atV43aBGIGpi9c5mR+G6xjyu6xpCNs:wOcmNdCmjNDbgujBGb0IGxu6xsFNk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8738aaa84d1057047ee5743483807cf1_JaffaCakes118

Files

8738aaa84d1057047ee5743483807cf1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1387da9d69023f1c5b6ad5ae39378187

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateConsoleScreenBuffer
CreateFileA
CreateThread
DisableThreadLibraryCalls
ExitProcess
FileTimeToLocalFileTime
FindFirstFileA
GetACP
GetCommandLineA
GetConsoleOutputCP
GetCurrentThread
GetDriveTypeA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetThreadContext
GetTickCount
GetVersionExA
GlobalAddAtomA
HeapAlloc
HeapCreate
HeapReAlloc
MulDiv
MultiByteToWideChar
OpenProcess
RtlUnwind
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsGetValue
UnmapViewOfFile
VirtualQueryEx
lstrcpyA
lstrcpynA
lstrlenA

user32

SystemParametersInfoA
UpdateWindow
SetWindowPos
SetScrollInfo
SetForegroundWindow
LoadIconA
IsDlgButtonChecked
DefFrameProcA
DrawIconEx
EndDialog
GetClientRect
GetDlgItemTextA
GetMenuItemID
CheckMenuItem
BeginDeferWindowPos
GetFocus

advapi32

AllocateAndInitializeSid
DuplicateEncryptionInfoFile
StartTraceA
MakeAbsoluteSD
LsaNtStatusToWinError
LsaEnumeratePrivileges
CryptDuplicateKey
LookupPrivilegeValueW
InitiateSystemShutdownW
InitializeSid
DuplicateToken

ole32

IsEqualGUID
StringFromGUID2
CreateAntiMoniker
CoGetMalloc
CoCreateInstance
CoCreateGuid
CLSIDFromString

opengl32

glVertex2f
glTexParameterf
glTexCoord4s
glTexCoord3sv
glTexCoord1s
glPixelMapusv
glMapGrid2d
glIndexub
glGetDoublev
glColor3fv
glClearStencil
wglCreateLayerContext

ddraw

DirectDrawCreate
DirectDrawCreateClipper

Exports

Exports

AFLock
AddDataToImageItem
BurnAtOnce
ConvertToCIFFJPEG
CreateChannelDesc
D3D10ResourceGetMappedArray
DriverGetVersion
EnumAvValueReset
EnumImageItemPropertyNext
EnumImageItemPropertyReset
EnumItemReset
EnumMCCustomSetNumberReset
EnumRelCamSettingNext
EventDestroy
FullView
GLSetGLDevice
GetAvailableDrives
GetDllsVersionEx
GetFile2
GetImageDataInItemCount
GetRelCamSettingData
GetSupportParamValueHead
GetSymbolAddress
GraphicsResourceSetMapFlags
GraphicsUnmapResources
HostGetFlags
MakeMyColorData
Memcpy2DToArrayAsync
Memset
RegisterVar
RuntimeGetVersion
TEMPVMGIServicesUnfinalizeMedium
UnbindTexture

Sections

.text
Size: 126KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1387da9d69023f1c5b6ad5ae39378187

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

opengl32

ddraw

Exports

Exports

Sections

.text Size: 126KB - Virtual size: 216KB

.data Size: 60KB - Virtual size: 60KB

.rsrc Size: 4KB - Virtual size: 8KB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 126KB - Virtual size: 216KB

.data
Size: 60KB - Virtual size: 60KB

.rsrc
Size: 4KB - Virtual size: 8KB

.reloc
Size: 1KB - Virtual size: 4KB