l:\Users\Administrator\Desktop\Release\FLiNGCPTrainer.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Shin Sangokumusou 6 v1.0 Plus 16 Trainer.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Shin Sangokumusou 6 v1.0 Plus 16 Trainer.exe
Resource
win10v2004-20240226-en
General
-
Target
21c3ae20ad8b1c06ec15082145b1713e_JaffaCakes118
-
Size
651KB
-
MD5
21c3ae20ad8b1c06ec15082145b1713e
-
SHA1
63bdd2ff78ea3a4a09eb3d6159a0d7bef55691e0
-
SHA256
4cc69368212ca3fc0e7d58c8988839a2c19b22f2114913b78e470e5dd8ad21d2
-
SHA512
c1ca6bb60ba4e6b781e84575a67b1216cd930afa1405025ebc7cb81ae2702e96031269c13102c7dac5aa635df6b0b2aff86f39a77982baa162451f4c7d14d034
-
SSDEEP
12288:ZcawJMSpaF8171AaZdNEQBWKb6k+Z0VrVOYfg/yXj+r7/1InjHb4PgQKzNHDN:6an2A6dvb6k+Z0d8YINInj7sgz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Shin Sangokumusou 6 v1.0 Plus 16 Trainer.exe
Files
-
21c3ae20ad8b1c06ec15082145b1713e_JaffaCakes118.zip
-
Shin Sangokumusou 6 v1.0 Plus 16 Trainer.exe.exe windows:4 windows x86 arch:x86
efc923d35a1e8fd9999e3d574cfc5982
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SetErrorMode
GetTickCount
FileTimeToLocalFileTime
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
CreateDirectoryA
HeapReAlloc
RtlUnwind
ExitProcess
RaiseException
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
FileTimeToSystemTime
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
Sleep
GetCPInfo
GetTimeFormatA
GetDateFormatA
GetACP
GetOEMCP
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
SetEnvironmentVariableA
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
lstrlenA
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GetModuleHandleA
InterlockedDecrement
FormatMessageW
LocalFree
MulDiv
SetLastError
GlobalAddAtomW
InterlockedCompareExchange
WritePrivateProfileStringW
GlobalFree
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetModuleFileNameW
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpW
GlobalDeleteAtom
VirtualFreeEx
VirtualAllocEx
ReadProcessMemory
Module32NextW
Module32FirstW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
WriteProcessMemory
GetModuleHandleW
WideCharToMultiByte
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
LockResource
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentProcessId
OpenProcess
SetProcessWorkingSetSize
GetFileAttributesW
GetLastError
LoadLibraryW
GetProcAddress
CreateFileW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
lstrlenW
GetCommandLineW
CloseHandle
user32
RegisterClipboardFormatW
PostThreadMessageW
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
LoadCursorW
SetCapture
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextW
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
CopyRect
GetDlgCtrlID
DefWindowProcW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
UnhookWindowsHookEx
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxW
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetKeyState
PeekMessageW
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
GetMenuState
EnableMenuItem
DestroyMenu
UnregisterClassW
CharUpperW
CheckMenuItem
GetDesktopWindow
GetSysColorBrush
MessageBeep
GetNextDlgGroupItem
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindow
SetWindowContextHelpId
GetParent
MapDialogRect
SetWindowPos
PostQuitMessage
PostMessageW
EnableWindow
SetWindowRgn
GetWindowRect
GetDC
PtInRect
ScreenToClient
GetCursorPos
KillTimer
GetWindowLongW
SetWindowLongW
ReleaseCapture
GetAsyncKeyState
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
SetTimer
SendMessageW
LoadIconW
CallWindowProcW
UnregisterClassA
gdi32
ExtSelectClipRgn
DeleteDC
GetStockObject
ScaleWindowExtEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
GetWindowExtEx
GetViewportExtEx
GetObjectW
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
RectVisible
PtVisible
CreateCompatibleDC
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
CreateBitmap
EnumFontFamiliesExW
CreateFontW
CreatePolygonRgn
TextOutW
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegDeleteKeyW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
shell32
SHGetFolderPathW
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW
oledlg
OleUIBusyW
ole32
OleIsCurrentClipboard
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CreateStreamOnHGlobal
OleFlushClipboard
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
CoRegisterMessageFilter
oleaut32
VariantCopy
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString
gdiplus
GdipCreateFromHDC
GdipDrawImageRectI
GdipLoadImageFromStream
GdipGetImageGraphicsContext
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipFree
GdipDeleteGraphics
GdipAlloc
winmm
mciSendStringW
PlaySoundW
Sections
.text Size: 384KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 704KB - Virtual size: 703KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ