93d20a99b473c3c6858ae4a5ac62b886_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

93d20a99b473c3c6858ae4a5ac62b886_JaffaCakes118
Size

333KB
MD5

93d20a99b473c3c6858ae4a5ac62b886
SHA1

2ac592e5919dd10b77560a77cf2599aaf9fe6bc8
SHA256

a19ab75fe58c01cd5c12b5a2af1642dfbdede13a9dbeec98d83f2a53b82ef053
SHA512

aaf167fad618793d54bce94c99e4e387104baa19bcc57fe55b235ffc38fe38ada02f50e522339537d802cea5bd4c5f4c6db641ff052f2defe1c1de8118afb378
SSDEEP

6144:NDOkK+55SJcxR3+qcbLkT+h4TEGrhJQP4EkROFjk8doTDK4VY:NDZK+55SJaRIb8+h4TEautNk8diDrVY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93d20a99b473c3c6858ae4a5ac62b886_JaffaCakes118

Files

93d20a99b473c3c6858ae4a5ac62b886_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bc249086d0da83fbda0db8093315a794

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\gryadka\ogorod.pdb

Imports

kernel32

Sleep
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryW
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
GetStringTypeW
CloseHandle
WriteConsoleW
SetStdHandle
CreateFileW
GetProfileStringA
LoadLibraryA
HeapSize
GetProcAddress
GetLastError
MultiByteToWideChar
MulDiv
HeapCreate
GetProcessHeap
GetComputerNameW
HeapAlloc
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
WriteFile
ExitProcess
GetModuleHandleW
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
LeaveCriticalSection
EnterCriticalSection
EncodePointer
DecodePointer
HeapFree
IsProcessorFeaturePresent
IsDebuggerPresent
SetFilePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

GetDC
GetScrollPos
DialogBoxParamA
EndPaint
DestroyWindow
SetTimer
GetWindowDC
SetCapture
KillTimer
IsZoomed
CharNextA
GetClientRect
BeginPaint
InsertMenuItemA
GetMenu
LoadMenuW
ReleaseDC
GetDlgItem
GetDesktopWindow
EnumWindowStationsW
CreatePopupMenu
GetMenuItemCount
SystemParametersInfoA
GetSystemMetrics
CloseWindow

gdi32

SetStretchBltMode
CreateSolidBrush
MoveToEx
BitBlt
LineTo
CreateFontIndirectW
StretchBlt
CreateFontIndirectA
CreateDCA
DeleteObject
SelectObject
Ellipse
FillRgn
SetDCPenColor
SwapBuffers
CreateRectRgn
Polyline
ChoosePixelFormat
SetPixelFormat
GetStockObject
TextOutA

comdlg32

PrintDlgA
FindTextA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

ole32

CoCreateInstance
CoInitialize
CoTaskMemFree

opengl32

wglDeleteContext
glColor3f
glFlush
glTranslatef
glViewport
glMatrixMode
glPolygonMode
glRotatef
glLoadIdentity
glPopMatrix
wglMakeCurrent
glShadeModel
glBegin
glEnd
glOrtho
glClearColor
glClear
wglCreateContext
glPushMatrix
glVertex2f

glu32

gluLookAt

Sections

.text
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc249086d0da83fbda0db8093315a794

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

opengl32

glu32

Sections

.text Size: 146KB - Virtual size: 145KB

.rdata Size: 61KB - Virtual size: 60KB

.data Size: 114KB - Virtual size: 124KB

.rsrc Size: 10KB - Virtual size: 10KB

.text
Size: 146KB - Virtual size: 145KB

.rdata
Size: 61KB - Virtual size: 60KB

.data
Size: 114KB - Virtual size: 124KB

.rsrc
Size: 10KB - Virtual size: 10KB