ef624ab08a36bbd6952384ce07760646_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ef624ab08a36bbd6952384ce07760646_JaffaCakes118
Size

333KB
MD5

ef624ab08a36bbd6952384ce07760646
SHA1

593edb6a72d24899f0ba3b06e8b028655ff2a569
SHA256

c909a641836e8ddba7fbcf4cff2b5db8506cd17be41f7db2c4681d047382546f
SHA512

25520f9c902ad0b043fe076de115c33468e723f933171c5d22381af8077018fe9c36ce1e1df01608bd69d267f4a73d32a33ad789c43ea2839457362f26a37b36
SSDEEP

6144:NDOkK+55SJcxR3+qcbLkT+h4TEGNhJQP4EkROFjk8doTDK4VY:NDZK+55SJaRIb8+h4TEgutNk8diDrVY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef624ab08a36bbd6952384ce07760646_JaffaCakes118

Files

ef624ab08a36bbd6952384ce07760646_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bc249086d0da83fbda0db8093315a794

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\gryadka\ogorod.pdb

Imports

kernel32

Sleep
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryW
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
GetStringTypeW
CloseHandle
WriteConsoleW
SetStdHandle
CreateFileW
GetProfileStringA
LoadLibraryA
HeapSize
GetProcAddress
GetLastError
MultiByteToWideChar
MulDiv
HeapCreate
GetProcessHeap
GetComputerNameW
HeapAlloc
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
WriteFile
ExitProcess
GetModuleHandleW
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
LeaveCriticalSection
EnterCriticalSection
EncodePointer
DecodePointer
HeapFree
IsProcessorFeaturePresent
IsDebuggerPresent
SetFilePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

GetDC
GetScrollPos
DialogBoxParamA
EndPaint
DestroyWindow
SetTimer
GetWindowDC
SetCapture
KillTimer
IsZoomed
CharNextA
GetClientRect
BeginPaint
InsertMenuItemA
GetMenu
LoadMenuW
ReleaseDC
GetDlgItem
GetDesktopWindow
EnumWindowStationsW
CreatePopupMenu
GetMenuItemCount
SystemParametersInfoA
GetSystemMetrics
CloseWindow

gdi32

SetStretchBltMode
CreateSolidBrush
MoveToEx
BitBlt
LineTo
CreateFontIndirectW
StretchBlt
CreateFontIndirectA
CreateDCA
DeleteObject
SelectObject
Ellipse
FillRgn
SetDCPenColor
SwapBuffers
CreateRectRgn
Polyline
ChoosePixelFormat
SetPixelFormat
GetStockObject
TextOutA

comdlg32

PrintDlgA
FindTextA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

ole32

CoCreateInstance
CoInitialize
CoTaskMemFree

opengl32

wglDeleteContext
glColor3f
glFlush
glTranslatef
glViewport
glMatrixMode
glPolygonMode
glRotatef
glLoadIdentity
glPopMatrix
wglMakeCurrent
glShadeModel
glBegin
glEnd
glOrtho
glClearColor
glClear
wglCreateContext
glPushMatrix
glVertex2f

glu32

gluLookAt

Sections

.text
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc249086d0da83fbda0db8093315a794

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

opengl32

glu32

Sections

.text Size: 146KB - Virtual size: 145KB

.rdata Size: 61KB - Virtual size: 60KB

.data Size: 114KB - Virtual size: 124KB

.rsrc Size: 10KB - Virtual size: 10KB

.text
Size: 146KB - Virtual size: 145KB

.rdata
Size: 61KB - Virtual size: 60KB

.data
Size: 114KB - Virtual size: 124KB

.rsrc
Size: 10KB - Virtual size: 10KB