893b54e932ec6a5c97d200849b3cbe28_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

893b54e932ec6a5c97d200849b3cbe28_JaffaCakes118
Size

373KB
MD5

893b54e932ec6a5c97d200849b3cbe28
SHA1

b35bfeb13ce761e51360ad557e0dab3b77cc9d74
SHA256

e84c8627f299e9177cf64759dffbd6a399d8f9f30d0a04cf7fe3fdcde652ccee
SHA512

91e7adcdd1c34d08a77e18ad594c4758a5034d70652ff4bb7c447e4d6771699672bd4945e75ac3cc72b864792f46bb30a0b43cc38b9373091f95b3022667df48
SSDEEP

6144:Dk3I9sVn4dYSp8dKJfhleVfDZoO32VgIxZh5Lyu9bLTe754aulZGWiqA9:DdswtJJleVLUuILh5rQ754BaPqQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
893b54e932ec6a5c97d200849b3cbe28_JaffaCakes118

Files

893b54e932ec6a5c97d200849b3cbe28_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e5670115c53c15e29d18870edd5c0886

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

getenv
_unlink
_wtol
fgetwc
_mbsdec
_wcsnset
_mbsupr
iswlower
_toupper
_mbsnbcat
_mbctolower
_open
_global_unwind2
_mbcjistojms
labs
_sopen
wcstol
bsearch
ungetwc
_lsearch
log
_rmdir
_CItanh
is_wctype
_ismbckata
_ismbcl1
_ismbcl2
_CIcosh
__argc_dll
_osmajor_dll
iswdigit
_wcsupr
fputc
ceil
wcscmp
_ismbbkalnum
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
ferror
__threadid
_fcloseall
iswupper
_get_osfhandle
_purecall
_spawnlp
_beginthread
feof
_spawnv
_iob
_ismbcsymbol
_findnext
_aexit_rtn_dll
_utime
_write
_mkdir
atol
clock
strlen
_winminor_dll
strncmp
tmpnam
_sys_errlist
_getdllprocaddr
cos
qsort
_strdate
_fsopen
_mbscpy
_fputchar

opengl32

glColor4b
glColor3i
glRasterPos2d
glMateriali
glEvalMesh2
wglGetProcAddress
glGetMaterialiv
glColor4bv
glTexCoord4fv
glRotatef
glTexCoord2dv
glTexParameteri
glAccum
glVertex4d
glInitNames
glRasterPos4fv
glMap2d
glGetMapiv
glLogicOp
glColor4ui
wglGetLayerPaletteEntries
glColor4us
glRasterPos3f
glNormal3dv
GlmfBeginGlsBlock
glIndexMask
wglDescribeLayerPlane
glFrontFace
glRotated
glRectiv
glCopyTexSubImage1D
glIndexf
glIndexubv
glScalef
glTexCoord1i
glVertex2sv
glDeleteTextures
glColor3uiv
glRasterPos2f

kernel32

LocalCompact
SizeofResource
RtlCaptureContext
DeleteTimerQueue
CommConfigDialogW
VirtualAlloc
GetCurrentThread
SetConsoleWindowInfo
GetTempPathA
VirtualFree
MulDiv
GetStringTypeW
QueryInformationJobObject
GetEnvironmentStringsA
SetConsoleMaximumWindowSize
LocalFree
IsBadHugeWritePtr
GetDevicePowerState
RegisterWowBaseHandlers
GlobalAlloc
GetConsoleKeyboardLayoutNameA
DeleteAtom
QueryPerformanceCounter
MoveFileWithProgressW
FlushInstructionCache
RegisterWowExec
LoadLibraryA
GetProfileStringW
GetCalendarInfoW
Heap32Next
SetLastError
_llseek
GetUserGeoID
CopyFileExW

sqlunirl

_CallWindowProc@20
_WritePrivateProfileStruct_@20
_WriteConsoleInput_@16
_GetTabbedTextExtent_@20
_lstrcpy_@8
_CreatePropertySheetPage_@4
_QueryDosDevice_@12
_GetGlyphOutline_@28
_DeviceCapabilities_@20
_FindWindow_@8
_ExtTextOut@32
_IsDialogMessage@8
_GetVersionEx@4
_SetDefaultCommConfig_@12
_ModifyMenu_@20
_CreateDialogParam_@20
_EnumWindowStations_@8
_NDdeGetShareSecurity_@24
_GetBinaryType_@8
_GetUserName@8
_DefWindowProc@16
_NDdeShareAdd_@20
_RegSetValue_@20
_RegisterClassEx_@4
_InitiateSystemShutdown_@20
_CopyEnhMetaFile_@8
_DialogBoxParam_@20
_tsystem
_RegSetValueEx_@24
_SHGetPathFromIDList_@8
_EnumDisplaySettings_@12
_GetClassLong_@8
_ObjectCloseAuditAlarm_@12
_GetComputerName@8
_FindResource@12
_VerQueryValue_@16
_ClearEventLog_@8
_EnumDependentServices_@24
_IsCharAlphaNumeric_@4
_GetCharWidth_@16
_BeginUpdateResource_@8
_CreateDialogIndirectParam@20

clbcatq

GetComputerObject
InprocServer32FromString
UpdateFromAppChange
DeleteAllActivatorsForClsid
OpenComponentLibraryOnStreamEx
GetCatalogObject2
GetCatalogObject
UpdateFromComponentChange
ComPlusMigrate
SetSetupSave
OpenComponentLibraryEx
OpenComponentLibraryOnMemEx
SetupSave
ServerGetApplicationType
DllGetClassObject
GetSimpleTableDispenser
SetupOpen
CheckMemoryGates
ActivatorUpdateForIsRouterChanges
CLSIDFromStringByBitness
SetSetupOpen
DowngradeAPL
CoRegCleanup
CreateComponentLibraryEx

Sections

.text
Size: 105KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5670115c53c15e29d18870edd5c0886

Headers

File Characteristics

Imports

crtdll

opengl32

kernel32

sqlunirl

clbcatq

Sections

.text Size: 105KB - Virtual size: 108KB

.rdata Size: 152KB - Virtual size: 156KB

.data Size: 512B - Virtual size: 504KB

.rsrc Size: 112KB - Virtual size: 112KB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 105KB - Virtual size: 108KB

.rdata
Size: 152KB - Virtual size: 156KB

.data
Size: 512B - Virtual size: 504KB

.rsrc
Size: 112KB - Virtual size: 112KB

.reloc
Size: 1KB - Virtual size: 4KB