82ad95154d3ada44b7e2ef9d334cf985_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
82ad95154d3ada44b7e2ef9d334cf985_JaffaCakes118
Size 1.0MB
Sample240530-b6eejsba93
SHA256 c660befe059386eb440c921b2eb7d24ff0267b9b7e88d4600b07094f9c8799d9
MD5 82ad95154d3ada44b7e2ef9d334cf985
SHA1 b74977c01880ab004dd61d54f5fd8d4e3303b4e9
SHA512 6e0bd363ae8648abc4a48bf9200b3058864a9ca8b483f8dd8cceb9bf20baf5455ed379fa883e5575fd901f5c4044bf79d8682dc58b6508482173ba63724d3edc
SSDEEP 24576:FvuFyrCUwqY4lCiBvdDrs4RPadmULkwxtzUay:9bzXs4RUmU48way
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82ad95154d3ada44b7e2ef9d334cf985_JaffaCakes118

File Explorer

82ad95154d3ada44b7e2ef9d334cf985_JaffaCakes118

.exe 1.0MB

82ad95154d3ada44b7e2ef9d334cf985_JaffaCakes118

IMPHASH cc4d69fe2dfb2427df15f4f4be3f0c4d
SHA256 c660befe059386eb440c921b2eb7d24ff0267b9b7e88d4600b07094f9c8799d9
MD5 82ad95154d3ada44b7e2ef9d334cf985
SHA1 b74977c01880ab004dd61d54f5fd8d4e3303b4e9
SHA512 6e0bd363ae8648abc4a48bf9200b3058864a9ca8b483f8dd8cceb9bf20baf5455ed379fa883e5575fd901f5c4044bf79d8682dc58b6508482173ba63724d3edc
SSDEEP 24576:FvuFyrCUwqY4lCiBvdDrs4RPadmULkwxtzUay:9bzXs4RUmU48way
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

269857

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

M:\TWRK\608de6e154b8c665\src\MicrogamingInstall\2013-Release\MicrogamingInstall.pdb

kernel32

GetCurrentThreadId GetCurrentProcessId OpenFileMappingA lstrcpyA FreeLibrary CreateDirectoryW LoadLibraryW CreateFileW MultiByteToWideChar GetProcAddress LocalFree lstrcpynA GetFileAttributesA lstrcpynW GetFileAttributesW GetModuleFileNameW lstrlenW CreateDirectoryA FindFirstFileA FindClose GetModuleFileNameA FindNextFileA WideCharToMultiByte CreateProcessW SetUnhandledExceptionFilter OpenProcess CreateProcessA RemoveDirectoryA CopyFileA GetTempFileNameA GetModuleHandleA GetTempPathA DeleteFileA GetComputerNameA FormatMessageA GetVolumePathNameW CopyFileW FormatMessageW RemoveDirectoryW ReleaseMutex GetDiskFreeSpaceExA GetVersionExA DeleteFileW SetFileAttributesW CreatePipe GetExitCodeThread WaitForMultipleObjects InterlockedExchangeAdd MoveFileA GetPrivateProfileStringW LoadLibraryA CreateMutexA GetDriveTypeA GetVolumeInformationA DeviceIoControl ResetEvent MoveFileExA Process32First TerminateProcess GetSystemDirectoryA GetLocalTime Process32Next CreateToolhelp32Snapshot OutputDebugStringW QueueUserWorkItem ReleaseSemaphore GetLogicalDriveStringsA GlobalMemoryStatusEx GetSystemInfo GetCurrentThread SetThreadPriority GetThreadTimes UnregisterWaitEx VirtualProtect VirtualFree VirtualAlloc GetVersionExW FreeLibraryAndExitThread QueryDepthSList UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation GetThreadPriority SwitchToThread SignalObjectAndWait WaitForSingleObjectEx CreateTimerQueue DuplicateHandle SetEndOfFile GetFullPathNameW PeekNamedPipe GetFileInformationByHandle FileTimeToLocalFileTime SetStdHandle GetStringTypeW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetCurrentDirectoryW GetConsoleCP FlushFileBuffers FileTimeToSystemTime SystemTimeToTzSpecificLocalTime FindFirstFileExW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter SetFilePointerEx ReadConsoleW GetConsoleMode GetTimeZoneInformation CreateSemaphoreW GetModuleHandleW GetTickCount GetStartupInfoW TlsFree CreateFileMappingA lstrcmpiA InterlockedExchange lstrcatA Sleep InterlockedCompareExchange InterlockedDecrement UnmapViewOfFile InterlockedIncrement MapViewOfFile lstrlenA GetFileSize InterlockedPushEntrySList InterlockedFlushSList InterlockedPopEntrySList InitializeSListHead CloseHandle ReadFile WriteFile SetFilePointer CreateFileA CreateThread OutputDebugStringA GetLastError CreateEventA SetEvent CreateSemaphoreA WaitForSingleObject TlsSetValue TlsGetValue TlsAlloc GetCurrentProcess CreateEventW InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter DeleteCriticalSection GetCPInfo GetOEMCP GetACP IsValidCodePage IsDebuggerPresent SetLastError HeapSize GetProcessHeap IsProcessorFeaturePresent WriteConsoleW GetFileType GetStdHandle RtlUnwind RaiseException GetCurrentDirectoryA SetCurrentDirectoryA SetEnvironmentVariableA GetFullPathNameA GetDriveTypeW GetCommandLineA LeaveCriticalSection EnterCriticalSection HeapReAlloc LoadLibraryExW ExitThread GetSystemTimeAsFileTime AreFileApisANSI GetModuleHandleExW ExitProcess HeapAlloc DecodePointer EncodePointer HeapFree

user32

SetWindowLongA GetWindowLongW AppendMenuW ReleaseDC OffsetRect ChildWindowFromPoint SetWindowLongW IsDialogMessageA PeekMessageA wsprintfA SendMessageA GetClientRect IsWindowEnabled LoadIconA SetForegroundWindow GetWindowDC TrackPopupMenu SetWindowPos GetCursorPos SetLayeredWindowAttributes CreatePopupMenu CreateWindowExW DispatchMessageA MessageBoxW RegisterClassW GetSystemMetrics IsWindowVisible LoadImageA MapWindowPoints UpdateWindow PostThreadMessageA GetMessageA InvalidateRect wsprintfW CopyRect SetFocus MessageBoxA SetWindowTextA GetWindowRect PostMessageA RegisterClassA ShowWindow DefWindowProcA EnableWindow AdjustWindowRect LoadCursorA GetDlgCtrlID DefWindowProcW MoveWindow FlashWindowEx TranslateMessage GetActiveWindow wvsprintfA DestroyWindow CreateWindowExA

gdi32

DeleteDC CreateDIBSection GetDIBits DeleteObject SelectObject CreateCompatibleDC GetStockObject BitBlt

advapi32

OpenSCManagerA CloseServiceHandle OpenServiceA RegSetValueExW RegOpenKeyExW RegQueryValueExW RegSetValueW RegSetValueA RegQueryValueW RegCloseKey GetUserNameA RegOpenKeyExA RegCreateKeyExA RegQueryValueExA RegSetValueExA FreeSid SetEntriesInAclW RegEnumKeyW

shell32

SHGetMalloc SHGetSpecialFolderLocation ShellExecuteA SHGetPathFromIDListW SHGetFolderPathW Shell_NotifyIconA SHGetSpecialFolderPathA SHChangeNotify

ole32

StringFromIID CoTaskMemFree CLSIDFromProgID OleSetContainedObject OleCreate OleUninitialize CoCreateInstance CoCreateGuid CoTaskMemAlloc CoSetProxyBlanket CoUninitialize CoInitialize OleInitialize

oleaut32

VariantTimeToSystemTime VariantCopy VariantChangeType SysStringLen SysAllocString SysAllocStringLen SysFreeString VariantClear SafeArrayCreateVector SafeArrayAccessData VariantInit SafeArrayUnaccessData

wsock32

gethostbyname send WSAStartup WSACleanup closesocket socket htons inet_addr htonl WSAGetLastError ntohs getservbyport getservbyname WSASetLastError gethostbyaddr connect ioctlsocket

ws2_32

WSAAddressToStringA

wininet

InternetReadFile HttpSendRequestA InternetCrackUrlA InternetGetLastResponseInfoA InternetConnectA HttpOpenRequestA InternetSetOptionA InternetOpenUrlW InternetOpenW InternetCrackUrlW InternetOpenUrlA HttpQueryInfoA InternetCloseHandle InternetOpenA

shlwapi

StrStrA PathAppendW PathCanonicalizeW SHDeleteKeyA PathAppendA PathCanonicalizeA PathFileExistsA UrlCombineA PathFindFileNameA

netapi32

NetWkstaGetInfo NetApiBufferFree

psapi

GetModuleFileNameExA

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

urlmon

CoInternetGetSession

Sharing

General

Malware Config

Signatures

File Explorer

82ad95154d3ada44b7e2ef9d334cf985_JaffaCakes118

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

wsock32

ws2_32

wininet

shlwapi

netapi32

psapi

version

urlmon

generic