b13088229779658868df3428ab0e3b6e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b13088229779658868df3428ab0e3b6e_JaffaCakes118
Size

855KB
MD5

b13088229779658868df3428ab0e3b6e
SHA1

052d5e37464df415c537faf8af418fb832a6f4f6
SHA256

edc4f0368befdfebcaabbffa5b42689a5b29ad89f512c3c761b7c13b4b56850b
SHA512

f4df0b4b40bd52ceee804553ad187f87698ea4ca1a57a53f2575329d4a8e677f81b05478b7d73ea8b73fee244cb1a1e0f4d9f4fad11b125f3176243a4372abfa
SSDEEP

24576:mMFwc7UnfJd7bY9mVKhcHFGyo33trdnJc:bzyfJd7UIVKhcHUyE3FdJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b13088229779658868df3428ab0e3b6e_JaffaCakes118

Files

b13088229779658868df3428ab0e3b6e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

59f9eab62a62ced856be3db59f9de464

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt40

_outp
??0strstreambuf@@QAE@P6APAXJ@ZP6AXPAX@Z@Z
_mbsdec
??1Iostream_init@@QAE@XZ
_CIasin
_setsystime
??_Gstrstreambuf@@UAEPAXI@Z
?clog@@3Vostream_withassign@@A
iswupper
?sh_none@filebuf@@2HB
?hex@@YAAAVios@@AAV1@@Z
??4istream_withassign@@QAEAAV0@ABV0@@Z
_strlwr
?rdbuf@fstream@@QBEPAVfilebuf@@XZ
_mtunlock
_except_handler3
_telli64
??_Gfstream@@UAEPAXI@Z
_execve
vfwprintf
fputws
_mbsstr
isxdigit
??0ios@@IAE@ABV0@@Z
_rotl
_amsg_exit
_y1
??0strstreambuf@@QAE@XZ
?underflow@filebuf@@UAEHXZ
fgetwc

kernel32

PeekConsoleInputA
SetLocalTime
SetStdHandle
VirtualLock
GetConsoleNlsMode
GetStdHandle
MapViewOfFile
GetFileSizeEx
WriteFileEx
GetACP
lstrlenW
VirtualAlloc
FindFirstChangeNotificationW
LoadLibraryA
GetOEMCP
GetNextVDMCommand
GetConsoleCursorInfo
GetConsoleKeyboardLayoutNameW
LeaveCriticalSection
GetCommTimeouts
GetConsoleFontSize
lstrcmpiW
Module32First
GetNumberOfConsoleMouseButtons
SetSystemTimeAdjustment
CloseHandle
Module32FirstW
GlobalSize
GetProfileStringW
RemoveDirectoryA
Thread32Next
RegisterConsoleIME
IsDebuggerPresent
GetPrivateProfileSectionW
GlobalAlloc
VerifyVersionInfoW
ConvertThreadToFiber
ConvertFiberToThread
GetTempPathW
GetLocaleInfoW
FindClose
DeleteFileA
RtlZeroMemory
GetLongPathNameA
GetFileAttributesW
FindFirstVolumeA
GetDriveTypeA
GetFileAttributesExA

opengl32

glDrawPixels
glDepthRange
glPixelStoref
glReadPixels
glNormal3b
glTexCoord1i
glColor4dv
glVertex4dv
glVertex3iv
glTexGenf
glTexSubImage1D
glTexParameterf
glIndexf
glTexCoord3d
glFlush
glMapGrid1f
glFrustum
glLoadMatrixf
glTexCoord2sv
glTexCoord3s
glEnd
glPopAttrib
glTexCoord3i
glTexCoord1s
glAreTexturesResident
glRasterPos3fv
glGenTextures
glPassThrough
glCopyTexImage2D
glPushMatrix
wglMakeCurrent

url

TelnetProtocolHandlerA
MailToProtocolHandler
OpenURL
OpenURLA
InetIsOffline
URLAssociationDialogA
MailToProtocolHandlerA
FileProtocolHandler
TranslateURLW
TelnetProtocolHandler
AutodialHookCallback
URLAssociationDialogW
MIMEAssociationDialogA
FileProtocolHandlerA
TranslateURLA
AddMIMEFileTypesPS
MIMEAssociationDialogW

Sections

.text
Size: 330KB - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 362KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

59f9eab62a62ced856be3db59f9de464

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt40

kernel32

opengl32

url

Sections

.text Size: 330KB - Virtual size: 330KB

.rdata Size: 362KB - Virtual size: 362KB

.data Size: 160KB - Virtual size: 1.6MB

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 1024B - Virtual size: 1024B

.text
Size: 330KB - Virtual size: 330KB

.rdata
Size: 362KB - Virtual size: 362KB

.data
Size: 160KB - Virtual size: 1.6MB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 1024B - Virtual size: 1024B