d6145cddafdf0f7243c765ea9c7e38cd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d6145cddafdf0f7243c765ea9c7e38cd_JaffaCakes118
Size

23KB
MD5

d6145cddafdf0f7243c765ea9c7e38cd
SHA1

15f42cf66064eaba0803147db25ecb43d684f768
SHA256

4207135ece26c46c630a266b35aefe8803c6af0da038537756bfca9efa54b474
SHA512

35d135e6a08fe35c70fe61c8b17c83d1baaa46e00b7d577273f10497f16bab667ce50e24da55592d91767da5c625c51bcc4a02f90c00c550063b1a286959a879
SSDEEP

384:IwTmiZ29qgsFwPjAuILGItOPcjgGLGXS3XfJHPh9VbAs5gB+POuanZvxPjK:IwTmikxsFwqCKjgGCXEfTD5gMPOuCZJe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6145cddafdf0f7243c765ea9c7e38cd_JaffaCakes118

Files

d6145cddafdf0f7243c765ea9c7e38cd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4f371eaec08d3767ccfecfa36741b4d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcirt

?flags@ios@@QBEJXZ
??0fstream@@QAE@H@Z
??1iostream@@UAE@XZ
??6ostream@@QAEAAV0@PBD@Z
??_Dfstream@@QAEXXZ
??_8ifstream@@7B@
??5istream@@QAEAAV0@AAK@Z
??_Gistream_withassign@@UAEPAXI@Z
??6ostream@@QAEAAV0@O@Z
??_Efstream@@UAEPAXI@Z
??0istrstream@@QAE@PAD@Z
??_Dstdiostream@@QAEXXZ
?floatfield@ios@@2JB
??0Iostream_init@@QAE@AAVios@@H@Z
?dbp@streambuf@@QAEXXZ

opengl32

glMultMatrixd
wglSwapBuffers
wglRealizeLayerPalette
glGetPointerv
glLighti
glFrontFace
glNormal3d
glNormalPointer
glGetTexEnvfv
glRasterPos4i
glMapGrid1f
glReadBuffer
glTexParameterf
glIndexiv
glVertex4i
glRasterPos3iv
glRasterPos4f

msvcrt40

??0fstream@@QAE@PBDHH@Z
??0ostream@@IAE@ABV0@@Z
?sputn@streambuf@@QAEHPBDH@Z
?ipfx@istream@@QAEHH@Z
srand
perror
strrchr
__p__wenviron
?setg@streambuf@@IAEXPAD00@Z
??6ostream@@QAEAAV0@I@Z
??1ostrstream@@UAE@XZ
?clrlock@streambuf@@QAEXXZ
??0fstream@@QAE@H@Z
_mbslwr
asctime
??_Eifstream@@UAEPAXI@Z

atmlib

ATMMakePSS
ATMEnumFonts
ATMRemoveSubstFontW
ATMFontSelected
ATMGetPostScriptNameA
ATMEnumMMFontsA
ATMEndFontChange
ATMGetFontPaths
ATMFontAvailableA
ATMBBoxBaseXYShowText
ATMMakePFMW
ATMFontStatus

kernel32

GetCurrentThreadId
CloseProfileUserMapping
VirtualFreeEx
LZOpenFileA
SetComputerNameExW
RestoreLastError
OutputDebugStringW
QueryPerformanceCounter
WriteConsoleW
CancelIo
SetComputerNameW
SwitchToFiber
GetTickCount
GetDriveTypeA
VirtualAlloc
GlobalFix
DosPathToSessionPathA
GetCurrentProcessId
EnumSystemLocalesA

ifsutil

?Pop@INTSTACK@@QAEXK@Z
?Initialize@MOUNT_POINT_MAP@@QAEEXZ
??1MOUNT_POINT_MAP@@UAE@XZ
??0SECRUN@@QAE@XZ
??1SECRUN@@UAE@XZ
?Add@NUMBER_SET@@QAEEVBIG_INT@@@Z
?Initialize@LOG_IO_DP_DRIVE@@QAEEPBVWSTRING@@PAVMESSAGE@@EG@Z
?QueryNtfsSupportInfo@DP_DRIVE@@SGJPAXPAE@Z
?QueryCanonicalNtDriveName@IFS_SYSTEM@@SGEPBVWSTRING@@PAV2@@Z
??1INTSTACK@@UAE@XZ
?Initialize@LOG_IO_DP_DRIVE@@QAEEPBVWSTRING@@0PAVMESSAGE@@E@Z
?QueryDisjointRangeAndAssignBuffer@TLINK@@QAEPAXPAVBIG_INT@@PAG1PAXK2@Z
?GetData@TLINK@@QAEAAVBIG_INT@@G@Z
??0DIGRAPH@@QAE@XZ
?QueryChildren@DIGRAPH@@QBEEKPAVNUMBER_SET@@@Z
?ShellSort@TLINK@@QAEXXZ
?QueryNtfsVersion@IFS_SYSTEM@@SGEPAE0PAVLOG_IO_DP_DRIVE@@PAX@Z

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 631B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f371eaec08d3767ccfecfa36741b4d5

Headers

DLL Characteristics

File Characteristics

Imports

msvcirt

opengl32

msvcrt40

atmlib

kernel32

ifsutil

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 1024B - Virtual size: 631B

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 1024B - Virtual size: 631B

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 2KB