96bf352116f753d255f2ab402be92884_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

96bf352116f753d255f2ab402be92884_JaffaCakes118
Size

189KB
MD5

96bf352116f753d255f2ab402be92884
SHA1

4c698b56c6a19755576f7d578963dfa511d931e3
SHA256

8f7eb188a6be499bd195c0c1f4c6f12fdcdd6060f9aa65a62fb2f60184d819a0
SHA512

c245d432add7bfad2441297ba01af1723e78fe753d66e7dd6b3ce9c4f0c42811eb2d892e987921c8b5e2f94b7e8a2e4501a23c66815748c753aeba7d17975a87
SSDEEP

3072:YCfVRpQfDiPlSIVK+lKSSaILAhRprS/Gh26GwSgDi77QSP2JtHNq3e0xTaRrxFCy:YyAWSIVK+lfSaILAnpuK263S6iI3tqOB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96bf352116f753d255f2ab402be92884_JaffaCakes118

Files

96bf352116f753d255f2ab402be92884_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b261c007d2f82c28554a8d35eacb1458

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcirt

??0stdiostream@@QAE@ABV0@@Z
??0istream@@QAE@PAVstreambuf@@@Z
??1ofstream@@UAE@XZ
?x_maxbit@ios@@0JA
?unbuffered@streambuf@@IBEHXZ
??_Estrstreambuf@@UAEPAXI@Z
?stdiofile@stdiobuf@@QAEPAU_iobuf@@XZ
?fLockcInit@ios@@0HA
??_8ostream@@7B@
?lockptr@ios@@IAEPAU_CRT_CRITICAL_SECTION@@XZ
?get@istream@@QAEAAV1@AAE@Z
?precision@ios@@QAEHH@Z
?setmode@ifstream@@QAEHH@Z
?lockbuf@ios@@QAAXXZ

opengl32

glFinish
glBitmap
glTexCoord4sv
glVertex2i
glEvalCoord1fv
glLightfv
glTexCoord1f
glLightModelfv
glGetLightfv
glRectfv
glBegin
glGetPixelMapuiv

msvcp60

??_D?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAEXXZ
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBF@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
?log@?$_Ctr@M@std@@SAMM@Z
?_Getcat@?$moneypunct@G$0A@@std@@SAIXZ
??X?$_Complex_base@N@std@@QAEAAV01@ABN@Z
?getloc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AVlocale@2@XZ
?narrow@?$ctype@D@std@@QBEPBDPBD0DPAD@Z
??4runtime_error@std@@QAEAAV01@ABV01@@Z
?_Nomemory@std@@YAXXZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXID@Z

shell32

StrNCmpA
SHGetFileInfo
SHChangeNotify
SHGetFolderPathAndSubDirA
SHFreeNameMappings
StrRChrA
PrintersGetCommand_RunDLLA
DragQueryFileA
SHBrowseForFolderA
RealShellExecuteA
RegenerateUserEnvironment
ShellExec_RunDLL
OpenAs_RunDLLA

kernel32

GetCurrentProcessId
GetDevicePowerState
GetPrivateProfileStringW
lstrcpy
GetCurrentProcess
_hread
GetBinaryTypeW
GlobalMemoryStatusEx
Module32Next
GetCurrentThreadId
UpdateResourceW
QueryPerformanceCounter
Thread32First
VirtualAlloc
GetSystemWindowsDirectoryW
GetComPlusPackageInstallStatus
GetTickCount

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idat_43
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b261c007d2f82c28554a8d35eacb1458

Headers

DLL Characteristics

File Characteristics

Imports

msvcirt

opengl32

msvcp60

shell32

kernel32

Sections

.text Size: 103KB - Virtual size: 103KB

.idat_43 Size: 55KB - Virtual size: 55KB

.data Size: 27KB - Virtual size: 30KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 103KB - Virtual size: 103KB

.idat_43
Size: 55KB - Virtual size: 55KB

.data
Size: 27KB - Virtual size: 30KB

.rsrc
Size: 1KB - Virtual size: 1KB