40240a016a28ff9a3f3e8c1c727ec905_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

40240a016a28ff9a3f3e8c1c727ec905_JaffaCakes118
Size

98KB
MD5

40240a016a28ff9a3f3e8c1c727ec905
SHA1

6a04b53f22012c15fbc671d367e40554c5923f69
SHA256

711bf4c220d5a551d4245a3bda4d7d9ae484039be4c752c6e027ec2a8df3c7f7
SHA512

a3e01303a28fff897be3e0feb17238d15789d024fb2c091b62a3f0f1e8c7444f07b79cb48154cf229dc86f5b758e47e3ad5b5accbcce742fa3c1fe53389982a8
SSDEEP

3072:bgxFnlmd1omfaRVJgd0/UypFLd+OqvsI:bgx1la0Je0/fpFLd+nP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40240a016a28ff9a3f3e8c1c727ec905_JaffaCakes118

Files

40240a016a28ff9a3f3e8c1c727ec905_JaffaCakes118
.exe windows:4 windows x86 arch:x86

13a5e985c92b15fb584215dd553df975

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glColor4f
glRectd
glDisableClientState
glColor3ui
glTexGend
glTexCoord4iv
glLoadMatrixd
glFlush
glInterleavedArrays
glTexParameterfv
glCopyTexSubImage1D
glGetPointerv
glTexCoord2d
glTexCoord2i
glGetTexGendv

shlwapi

PathGetDriveNumberA
StrCpyW
StrDupW
PathIsSameRootW
PathAddExtensionW
StrToIntExA
SHQueryValueExW
SHRegDeleteUSValueW
StrPBrkW
StrCmpIW
StrChrW

kernel32

GetUserDefaultLangID
WaitForSingleObject
OpenMutexA
GetCPInfoExA
GetModuleHandleA
GetProcAddress
VirtualAlloc
GetLastError
GetFullPathNameA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
InitializeCriticalSection
GetCurrentDirectoryA
GetDriveTypeA
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
SetStdHandle
FlushFileBuffers
CloseHandle
CreateFileA
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
GetStringTypeA
GetStringTypeW
SetEndOfFile
RaiseException
LCMapStringA
LCMapStringW

secur32

AcceptSecurityContext
CompleteAuthToken
EncryptMessage
FreeCredentialsHandle
ExportSecurityContext
ApplyControlToken
VerifySignature
MakeSignature
DeleteSecurityContext
DecryptMessage

ws2_32

listen
ntohs
connect
socket
shutdown
sendto
htons
select
htonl
getsockname
getservbyname
send
gethostbyname

setupapi

SetupDiGetWizardPage
SetupCommitFileQueueW
SetupDiInstallClassExW
SetupDiCreateDeviceInfoA
SetupDiCreateDeviceInfoW
SetupDiGetSelectedDevice
SetupCommitFileQueueA
SetupTerminateFileLog
SetupInitializeFileLogA
SetupRemoveFileLogEntryA

comdlg32

PageSetupDlgW
PrintDlgA
GetFileTitleA
FindTextA
FindTextW
PageSetupDlgA
PrintDlgW
ReplaceTextA

hlink

ord5

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13a5e985c92b15fb584215dd553df975

Headers

File Characteristics

Imports

opengl32

shlwapi

kernel32

secur32

ws2_32

setupapi

comdlg32

hlink

Sections

.text Size: 38KB - Virtual size: 38KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 18KB

.rsrc Size: 45KB - Virtual size: 44KB

.text
Size: 38KB - Virtual size: 38KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 18KB

.rsrc
Size: 45KB - Virtual size: 44KB