a8791bb80ba12cfe987d603e94e4c7a6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a8791bb80ba12cfe987d603e94e4c7a6_JaffaCakes118
Size

202KB
MD5

a8791bb80ba12cfe987d603e94e4c7a6
SHA1

85f9b1997817932545e20c743d93b712d6cbe0b5
SHA256

5a08df18a9274178eaad9d4e18febb74f0ed08e3fc488c65522d73bc6a859da2
SHA512

81c6ea0d175137e9b86ec2a7703d32eb63a693add6517e4b3859ace7acb8d65a9db4af58cb57c7ce1ef47045ebcb4d3802b2941c094e13e7c55b9f880afd4a22
SSDEEP

3072:GqM0kIn8JdbsT8nMVcH1F2INUL13ocw+MIIXwvoQlTLz6wi5n2nSG+Trf:8gn8TbsT6PSppIAvoI6aj+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8791bb80ba12cfe987d603e94e4c7a6_JaffaCakes118

Files

a8791bb80ba12cfe987d603e94e4c7a6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d34425d2de8adbcaf5c8de1a2155bb4f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateConsoleScreenBuffer
CreateFileA
DisableThreadLibraryCalls
ExitProcess
GetACP
GetCommandLineA
GetConsoleMode
GetConsoleOutputCP
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetUserDefaultLCID
GetVersionExA
HeapAlloc
HeapCreate
HeapReAlloc
InitializeCriticalSection
IsDebuggerPresent
LoadLibraryA
MultiByteToWideChar
ReadProcessMemory
RtlUnwind
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
VirtualAlloc
lstrcatA
lstrcpyA

user32

DestroyIcon
DrawFrameControl
DrawTextA
EnableMenuItem
ExitWindowsEx
FindWindowExA
GetWindowDC
IsZoomed
PostMessageA
RegisterClassA
SetCapture
ShowWindow
CreatePopupMenu
AppendMenuA
GetDesktopWindow

advapi32

QueryServiceConfigW
DeleteService
StartServiceW
RegOverridePredefKey
RegEnumKeyExW
QueryServiceLockStatusA
ConvertSDToStringSDRootDomainW
ElfReportEventW
LsaSetInformationTrustedDomain
LsaICLookupSids

ole32

StringFromGUID2
IsEqualGUID
CoTaskMemAlloc
CoGetMalloc
CoCreateInstance

opengl32

glScissor
glReadBuffer
glPointSize
glTexCoord4f
glLoadMatrixf
glGetTexParameterfv
glFogiv
glTexEnvfv
glTexParameterfv
glVertex2fv
glVertex3dv
glBlendFunc
glMap1f
glEvalPoint2
glColor3s

ddraw

DirectDrawCreateEx
GetDDSurfaceLocal

Exports

Exports

AudioCloseItem
BurnAtOnce
ConvertToExifTiff
CreateFileSystemDriverFromDevicehandle
D3D10ResourceGetMappedSize
EnumAFDistanceSettingNext
EnumExposureCompNext
EnumImageFormatAttributeRelease
EnumMCCustomSetNumberRelease
ExitReleaseControl
GLUnmapBufferObject
GetFileHeader
GetLastDriveError
GetThumbnailFromExifTiff
GraphicsD3D10RegisterResource
IsSupportParamValue
Launch
Memcpy2DArrayToArray
MemcpyFromArrayAsync
OpenDevice
RegisterVar

Sections

.text
Size: 135KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d34425d2de8adbcaf5c8de1a2155bb4f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

opengl32

ddraw

Exports

Exports

Sections

.text Size: 135KB - Virtual size: 212KB

.data Size: 60KB - Virtual size: 64KB

.rsrc Size: 4KB - Virtual size: 8KB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 135KB - Virtual size: 212KB

.data
Size: 60KB - Virtual size: 64KB

.rsrc
Size: 4KB - Virtual size: 8KB

.reloc
Size: 1KB - Virtual size: 4KB