3f74aeac24dd45850475fd58d06fed4e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3f74aeac24dd45850475fd58d06fed4e_JaffaCakes118
Size

82KB
MD5

3f74aeac24dd45850475fd58d06fed4e
SHA1

91b33899ef68a6732730527a25c0fb9a000146ff
SHA256

09f73dccd6caf084b001baae9499027fa1de1f354d39fccd54c47e4c94223ffc
SHA512

06ed564292de2f4687895dcbe1b5fbd206f55ceb8f1aee549226de30ccc59f18a8b7c5890fb9219e4da2a760e066209b511eaefc56f982f958dd76e0ca2cb07c
SSDEEP

1536:JxBqJVw6hRUDS26mQSQ67LYgCLu0/qQaIiz:Jqo6h2DS1mrQ67LTtJIi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f74aeac24dd45850475fd58d06fed4e_JaffaCakes118

Files

3f74aeac24dd45850475fd58d06fed4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd4014bbd2c460069308039b1e5ab9b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glReadBuffer
glGetBooleanv
glPixelTransferi
glGetTexEnvfv
glRasterPos3i
glRasterPos3fv
glTexParameteri
glVertex2iv
glScalef
glArrayElement
glEnableClientState
glRectiv
glLightiv

ole32

CoUnmarshalInterface
GetRunningObjectTable
CreateAntiMoniker
WriteFmtUserTypeStg
CoCreateInstance
DoDragDrop
OleCreateFromDataEx
StgCreateDocfile
OleNoteObjectVisible
OleRun
CoLockObjectExternal
OleQueryCreateFromData
MkParseDisplayName

gdi32

CreateDCW
ChoosePixelFormat
ExtFloodFill
CreateDiscardableBitmap
CreateFontW
EqualRgn
GetBkColor
GetAspectRatioFilterEx
CombineTransform
Escape
DescribePixelFormat
DrawEscape
BitBlt

advapi32

RegOpenKeyExA
RegLoadKeyA
ReportEventA
CloseEventLog
NotifyChangeEventLog
GetTokenInformation
OpenEventLogA
RegQueryValueExA
RegSetValueA

kernel32

GetPrivateProfileSectionA
GetModuleHandleA
GetProcAddress
SuspendThread
GetModuleFileNameA
GetCommandLineA
GetEnvironmentStrings
SetHandleInformation
GetVersion
SetEvent
GetCurrentProcess
ReleaseMutex
TlsSetValue
VirtualAllocEx
GetCurrentProcessId
CloseHandle
GetProcessHeap
GetStdHandle
GetStartupInfoA

secur32

AcceptSecurityContext
MakeSignature
CompleteAuthToken

avifil32

AVIBuildFilterW
AVIStreamFindSample
AVISaveVW
EditStreamSetInfoW
AVIMakeCompressedStream
AVIStreamOpenFromFileA
AVIFileInfoA
AVIClearClipboard
AVIStreamReadData

msvfw32

ICGetInfo
ICInfo
GetOpenFileNamePreviewA

uxtheme

GetThemeIntList
DrawThemeEdge
SetWindowTheme
DrawThemeText
GetThemePosition
OpenThemeData
GetThemeSysBool
IsThemeActive
EnableTheming

ws2_32

gethostbyname
recv
getsockopt
accept
getservbyname
socket
recvfrom
send
gethostbyaddr
getpeername
getservbyport
sendto

wsnmp32

ord200

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd4014bbd2c460069308039b1e5ab9b2

Headers

File Characteristics

Imports

opengl32

ole32

gdi32

advapi32

kernel32

secur32

avifil32

msvfw32

uxtheme

ws2_32

wsnmp32

msvcrt

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 13KB - Virtual size: 17KB

.rsrc Size: 43KB - Virtual size: 42KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 13KB - Virtual size: 17KB

.rsrc
Size: 43KB - Virtual size: 42KB

.reloc
Size: 1KB - Virtual size: 1KB