3f11c83279dc94462ee5eb7759d2b8ad_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3f11c83279dc94462ee5eb7759d2b8ad_JaffaCakes118
Size

131KB
MD5

3f11c83279dc94462ee5eb7759d2b8ad
SHA1

bc1019503e7857ff61f850f1f923e9cc6ef9f58a
SHA256

885704e0c2640f7e9535571cdbe3875e6b98bf240dc2ea54564b66a4055e3adb
SHA512

839374e0176384d1126ad3a891635a8c0c806529f44776cb4d4ee84f4c1afd51b08be963d73a8f98895fe9204e2a7f4842deef8e1edcdebb35ceeca3bd796c46
SSDEEP

3072:VUtOjFy+aPC62dRq4Jet7v7jM+JI0avOI5K:VUiy+aPcRqdTM2I0IK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f11c83279dc94462ee5eb7759d2b8ad_JaffaCakes118

Files

3f11c83279dc94462ee5eb7759d2b8ad_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d74c37241bb3d1254b3a354215a8cda6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glLoadIdentity
glClearDepth
glRasterPos2i
glCullFace
glColor4ubv

kernel32

HeapSize
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleA
GetProcAddress
CopyFileA
GetEnvironmentVariableA
VirtualAlloc
CreateSemaphoreA
OpenSemaphoreA
GetCurrentProcess
GetModuleFileNameA
QueryPerformanceCounter
Sleep
LocalFree
LocalReAlloc
GetProcessHeap
GetVersion
OpenMutexA
GetComputerNameA
SuspendThread
SetHandleInformation
GetCommandLineA
LCMapStringA
LocalLock
LoadLibraryW
TlsSetValue
HeapReAlloc
HeapAlloc
IsProcessorFeaturePresent
RtlUnwind
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
HeapFree
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
LCMapStringW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
HeapCreate
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
SetHandleCount
GetEnvironmentStringsW
GetStringTypeW
HeapSetInformation
GetStartupInfoW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
WideCharToMultiByte

ws2_32

listen
connect
ioctlsocket
gethostbyname
getpeername
gethostname
htons
ntohs
closesocket
getsockopt
recvfrom
getprotobynumber
getservbyport
getservbyname

wsnmp32

ord600
ord202
ord999
ord203
ord206

setupapi

SetupCopyErrorA
SetupGetLineByIndexW
SetupScanFileQueueA
SetupCloseFileQueue
SetupRemoveFileLogEntryW
SetupGetBinaryField
SetupOpenAppendInfFileW
SetupDiDeleteDeviceInfo
SetupScanFileQueueW
SetupDiUnremoveDevice

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vberi
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d74c37241bb3d1254b3a354215a8cda6

Headers

DLL Characteristics

File Characteristics

Imports

opengl32

kernel32

ws2_32

wsnmp32

setupapi

Sections

.text Size: 29KB - Virtual size: 29KB

.rdata Size: 48KB - Virtual size: 48KB

.data Size: 3KB - Virtual size: 56KB

.vberi Size: 44KB - Virtual size: 43KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 48KB - Virtual size: 48KB

.data
Size: 3KB - Virtual size: 56KB

.vberi
Size: 44KB - Virtual size: 43KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB