082fbe7af0b0e33c252a6bb404848096_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

082fbe7af0b0e33c252a6bb404848096_JaffaCakes118
Size

88KB
MD5

082fbe7af0b0e33c252a6bb404848096
SHA1

57f4a29c998dc5836e0d6ce0bfc7e18fa07b2c82
SHA256

f84dfc3714d5b015f4f333e6171a7fd21da2bb447df5c264910ae861a68b3305
SHA512

32caa15f1fb50802ec786888e13bc12859452e605f16b1558ed54e1ad4f72a448a8a6c6e8fbad887800e4f56657e14446c3b65a8b31f7c29bacfb1423927060d
SSDEEP

1536:jv8J00WUwqlTCrOYXgxthavttbjnk7tbjnk3tbjnkA:oJbmqlgf+Ithjnshjn4hjn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
082fbe7af0b0e33c252a6bb404848096_JaffaCakes118

Files

082fbe7af0b0e33c252a6bb404848096_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3cb9a4e3716780d304225797079d829a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glFogi
glTranslatef
glVertex2dv
glRasterPos3d
glIsList
glColor3ubv
glRasterPos4d

glu32

gluScaleImage
gluEndTrim
gluGetTessProperty
gluUnProject
gluQuadricNormals

user32

IsIconic
GetForegroundWindow
FindWindowA
ChildWindowFromPoint
IsWindowVisible
DefDlgProcA
AnyPopup
GetWindowTextLengthA
DialogBoxIndirectParamA
GetNextDlgGroupItem

ole32

CoRegisterSurrogate
PropStgNameToFmtId
StgIsStorageILockBytes
OleCreateStaticFromData
RegisterDragDrop
CreateFileMoniker
CLSIDFromProgID
DoDragDrop
BindMoniker

advapi32

CloseEventLog
RegCreateKeyA
NotifyChangeEventLog
OpenThreadToken

urlmon

RegisterBindStatusCallback

kernel32

LocalAlloc
IsBadStringPtrA
LocalReAlloc
GetCPInfo
VirtualProtect
LocalHandle
GetDateFormatA
CreateEventA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
WritePrivateProfileStringA
GetModuleHandleA
GetProcAddress
GetStdHandle
GetEnvironmentVariableA
OpenEventA
GetCurrentThreadId
CreateSemaphoreA
GetExitCodeThread
GetCurrentProcessId
GetHandleInformation
GetComputerNameA
LocalLock
TlsGetValue
GetProcessHeap
VirtualAlloc
GetStartupInfoA

activeds

ord15
ord9
ord3
ord14
ord8
ord18
ord12
ord13
ord16
ord21
ord6
ord23

comdlg32

GetOpenFileNameW
ChooseFontW
ChooseColorA
PrintDlgW
GetOpenFileNameA
ReplaceTextW

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dag
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3cb9a4e3716780d304225797079d829a

Headers

File Characteristics

Imports

opengl32

glu32

user32

ole32

advapi32

urlmon

kernel32

activeds

comdlg32

msvcrt

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 4KB

.dag Size: 3KB - Virtual size: 2KB

.rsrc Size: 70KB - Virtual size: 69KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 4KB

.dag
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 70KB - Virtual size: 69KB

.reloc
Size: 1KB - Virtual size: 1KB