a61326cc1799e8f3f151cdd13fcac56b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a61326cc1799e8f3f151cdd13fcac56b_JaffaCakes118
Size

48KB
MD5

a61326cc1799e8f3f151cdd13fcac56b
SHA1

dfad967ae2d68d2c2ea99913ea1318a9ffa9ccd9
SHA256

ad59e1c7082ed3ecd3e5488ff8db96b261dcfe2da28560c1129ab1265e0b029d
SHA512

77d469a9fd77f303b9882cc4d28d37fdb861fd9e8ce0fbb3cc0d620084f7ec4b1e03de0cc02f0485ae94a86d3aa77b145da8ba1e2f91aecf95911f2efd96af46
SSDEEP

768:LIjgH3j8ECj1u1bQxzvJfxUTrc/PosO9JJSDgkD6J5HFDy2ZFwo0xuM+NXek:s1O1bQxJfEYP0WgiatM2ZFKxu9ek

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a61326cc1799e8f3f151cdd13fcac56b_JaffaCakes118

Files

a61326cc1799e8f3f151cdd13fcac56b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

43bc780955b8f5cd944d7558b46b04ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

ZwOpenProcess
RtlCreateTimer
RtlFindMessage
NtLockRegistryKey
NtSetQuotaInformationFile
RtlMultiAppendUnicodeStringBuffer
NtSetIntervalProfile
NtQueryInformationAtom
RtlInitString
ZwOpenSemaphore
CsrSetPriorityClass
RtlNumberOfClearBits
RtlNewSecurityObjectEx
DbgPrintEx
ZwCreateSymbolicLinkObject
ZwQueryQuotaInformationFile
NtDuplicateToken
NtCreateSection
memchr
NtReleaseMutant
RtlGenerate8dot3Name
_itow
ZwOpenProcessTokenEx
NtLockProductActivationKeys
RtlGetCompressionWorkSpaceSize
NtDeleteValueKey
RtlEnterCriticalSection
NtAllocateLocallyUniqueId
RtlAppendUnicodeStringToString
tan
RtlResetRtlTranslations
RtlEraseUnicodeString
RtlpWaitForCriticalSection
RtlInitializeCriticalSectionAndSpinCount
RtlImpersonateSelf
RtlpNtQueryValueKey
NtQueryDirectoryFile
ZwAlertThread
RtlIsNameLegalDOS8Dot3
RtlLargeIntegerAdd

opengl32

GlmfInitPlayback
glVertex3dv
glTexGenf
glCopyTexSubImage1D
glDrawArrays
glRotatef
glRasterPos3d
glVertexPointer
glMapGrid1f
glMaterialf
glClearColor
glPrioritizeTextures
glTexCoord2dv
glFrontFace
glEdgeFlagv
wglSetLayerPaletteEntries
glEdgeFlagPointer
glGetTexEnvfv
glEvalPoint1
glTexSubImage1D
glEnd
wglUseFontOutlinesW
glTexImage1D
glIndexi
glTexCoord4i
glVertex3f
wglGetDefaultProcAddress
glColor3sv
glBlendFunc
glEvalCoord2f

gdi32

PolyPolygon
DeleteEnhMetaFile
GdiProcessSetup
SetDeviceGammaRamp
DdEntry24
DdEntry52
DeleteColorSpace
GdiGetDC
EngFillPath
GetPixel
RoundRect
GdiConsoleTextOut
AngleArc
RestoreDC
GdiConvertBitmapV5
IntersectClipRect
DeviceCapabilitiesExA
GetMapMode
GetStringBitmapA
EngLineTo
EngComputeGlyphSet
FillPath
GetStockObject
DdEntry56
GdiSetLastError
SwapBuffers
DdEntry43
DescribePixelFormat
GdiEntry9
Polygon
DdEntry21
GetBitmapBits
DdEntry0
GdiSetPixelFormat
GetDCOrgEx

imm32

ImmEscapeW
ImmLockClientImc
ImmGetCandidateListA
ImmGetIMEFileNameA
ImmCallImeConsoleIME
ImmSetStatusWindowPos
ImmSendIMEMessageExW
ImmRegisterClient
ImmGetImeInfoEx
ImmSystemHandler
ImmWINNLSEnableIME
ImmGetRegisterWordStyleW
ImmGetIMCCSize
ImmSendIMEMessageExA
ImmLockIMC
ImmInstallIMEW
ImmGetCompositionStringA
ImmIMPQueryIMEA
ImmGetIMCCLockCount
ImmProcessKey
ImmInstallIMEA
ImmDestroyContext
ImmAssociateContextEx
ImmPutImeMenuItemsIntoMappedFile
ImmSetActiveContext
ImmGetConversionStatus
ImmEscapeA
ImmTranslateMessage

wsnmp32

SnmpDeleteVb
SnmpDuplicatePdu
SnmpRegister
SnmpFreePdu
SnmpGetVendorInfo
SnmpGetTimeout
SnmpGetLastError
SnmpGetRetry
_SnmpConveyAgentAddress@4
_SnmpSetAgentAddress@4
SnmpSetPduData
SnmpOidToStr
SnmpSetTranslateMode
SnmpStrToEntity
SnmpContextToStr
SnmpSetRetransmitMode
SnmpStartup
SnmpSetPort
SnmpCountVbl
SnmpCancelMsg
SnmpDecodeMsg
SnmpOidCopy
SnmpCreateSession
SnmpFreeContext
SnmpGetPduData
SnmpDuplicateVbl
SnmpGetTranslateMode
SnmpListen
SnmpSendMsg
SnmpEncodeMsg
SnmpSetTimeout
SnmpEntityToStr
SnmpOidCompare
SnmpSetRetry
SnmpOpen
SnmpFreeVbl
SnmpCreateVbl

mscms

InternalGetPS2ColorRenderingDictionary
GetPS2ColorRenderingDictionary
AssociateColorProfileWithDeviceW
InternalGetDeviceConfig
IsColorProfileValid
GetStandardColorSpaceProfileW
InstallColorProfileW
SetColorProfileHeader
GetStandardColorSpaceProfileA
GetCMMInfo
GetColorProfileElement
InternalSetDeviceConfig
InternalGetPS2CSAFromLCS
SpoolerCopyFileEvent
GetColorProfileElementTag
CloseColorProfile
GetCountColorProfileElements
OpenColorProfileA
SetStandardColorSpaceProfileA
UninstallColorProfileW
RegisterCMMW
SelectCMM
InternalGetPS2PreviewCRD
InstallColorProfileA
ConvertColorNameToIndex
InternalGetPS2ColorSpaceArray
SetStandardColorSpaceProfileW

kernel32

VirtualAlloc
HeapCreate
LoadResource
ReadConsoleInputExW
GetCurrentThreadId
FindNextFileW
PeekConsoleInputA
CreateActCtxW
lstrcmpiW
GetLocaleInfoA
CompareStringW
WriteConsoleOutputW
GetModuleHandleExA
GetEnvironmentStringsA
GetFirmwareEnvironmentVariableW
GetFullPathNameW
GlobalAlloc
GetCPInfo
GetCurrentThread
MoveFileWithProgressW
LoadLibraryA
FileTimeToDosDateTime
WaitForSingleObject
SetSystemTimeAdjustment
FindClose
SetFileApisToANSI
OpenWaitableTimerW
SetThreadPriorityBoost
BackupRead
VirtualQueryEx
FindNextVolumeMountPointA
SetVolumeMountPointW
GetCommTimeouts
GetCommProperties
GetSystemTime

Sections

.text
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43bc780955b8f5cd944d7558b46b04ac

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

opengl32

gdi32

imm32

wsnmp32

mscms

kernel32

Sections

.text Size: 35KB - Virtual size: 36KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 1KB - Virtual size: 60KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.text
Size: 35KB - Virtual size: 36KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 1KB - Virtual size: 60KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB