01a8fb9e746dd2d600ac3c1c26b7e4cb_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

01a8fb9e746dd2d600ac3c1c26b7e4cb_JaffaCakes118
Size

101KB
MD5

01a8fb9e746dd2d600ac3c1c26b7e4cb
SHA1

41f1a6a9a29056f74516274d3f0d6d9907e23da4
SHA256

26ea7814f5888b85d90ce32ca2bccf0a70c2b1370c4acd022ec67e339829931b
SHA512

c47568b33d8c4ca6e3cfa5bb03c63e0cdd7c8fb479e3c115e484814107b76aaf889c690d8299743e20505f8e24aaa109ac123f892b8b9e2a6e873a9240ab0cc8
SSDEEP

1536:DfJEDJjoDTeuFAW49rWT7BB4o3PTZ//jUCNigdBtoqXyNHBxO0:DfJqZdW49rWT7BB4o3VXNigdnyNHBxO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01a8fb9e746dd2d600ac3c1c26b7e4cb_JaffaCakes118

Files

01a8fb9e746dd2d600ac3c1c26b7e4cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f763228ab3b09b46372f8b92995e7b3c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glTexCoord1sv
glRasterPos2sv
glTexEnviv
glIndexfv
glGetClipPlane
glRectdv
glGetTexEnviv
glTexCoord4dv
glGetString
glColor3f
glVertex2fv
glGetPixelMapfv

glu32

gluLoadSamplingMatrices
gluSphere
gluQuadricNormals
gluTessCallback
gluEndTrim
gluCylinder
gluBeginSurface
gluNewQuadric
gluErrorUnicodeStringEXT
gluEndCurve

kernel32

GetCPInfo
PulseEvent
GetUserDefaultLCID
VirtualFree
VirtualQueryEx
ReleaseMutex
HeapReAlloc
GetModuleHandleA
GetProcAddress
OpenSemaphoreA
LocalReAlloc
ResetEvent
GetTickCount
GetEnvironmentVariableA
GetCurrentProcess
OpenMutexA
SuspendThread
FreeEnvironmentStringsA
CopyFileA
VirtualAlloc
GetCurrentThreadId
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetLastError
SetFilePointer
FlushFileBuffers
WriteFile
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
RtlUnwind
SetStdHandle
CloseHandle
CreateFileA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
ReadFile
LCMapStringA
LCMapStringW

uxtheme

GetThemeSysString

wsnmp32

ord302
ord606
ord604
ord901
ord905
ord400
ord104
ord200

comdlg32

FindTextA
PageSetupDlgW
PrintDlgA
FindTextW
ChooseColorW
GetFileTitleA
GetOpenFileNameA
ChooseColorA
ReplaceTextA

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f763228ab3b09b46372f8b92995e7b3c

Headers

File Characteristics

Imports

opengl32

glu32

kernel32

uxtheme

wsnmp32

comdlg32

Sections

.text Size: 35KB - Virtual size: 34KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 3KB - Virtual size: 13KB

.rsrc Size: 45KB - Virtual size: 44KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 35KB - Virtual size: 34KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 3KB - Virtual size: 13KB

.rsrc
Size: 45KB - Virtual size: 44KB

.reloc
Size: 4KB - Virtual size: 4KB