8934016858e51e80846edab3009b2cea_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
8934016858e51e80846edab3009b2cea_JaffaCakes118
Size 1.0MB
Sample240601-dmpsaafg3s
SHA256 bee9e80e96df91fda57913c5d5df0c07fd68f0a548dcafef2fb7979d7e6c4ac0
MD5 8934016858e51e80846edab3009b2cea
SHA1 5fea647128591501ac67d217b968b002f43446c2
SHA512 d7fc7641457624ebe9ca9d0e1c61d9df2839674afdaa3ccb5eaeff7293e7199457eabf86829988cf4c59d4b61009838cd2cc149afabd6442539144504dd10519
SSDEEP 24576:qvuFyrCUwqY4lCiBvdDrs4RPNdmzBAwYd+7NBXauAK:0bzXs4RvmzBnYdyLXauAK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8934016858e51e80846edab3009b2cea_JaffaCakes118

File Explorer

8934016858e51e80846edab3009b2cea_JaffaCakes118

.exe 1.0MB

8934016858e51e80846edab3009b2cea_JaffaCakes118

IMPHASH cc4d69fe2dfb2427df15f4f4be3f0c4d
SHA256 bee9e80e96df91fda57913c5d5df0c07fd68f0a548dcafef2fb7979d7e6c4ac0
MD5 8934016858e51e80846edab3009b2cea
SHA1 5fea647128591501ac67d217b968b002f43446c2
SHA512 d7fc7641457624ebe9ca9d0e1c61d9df2839674afdaa3ccb5eaeff7293e7199457eabf86829988cf4c59d4b61009838cd2cc149afabd6442539144504dd10519
SSDEEP 24576:qvuFyrCUwqY4lCiBvdDrs4RPNdmzBAwYd+7NBXauAK:0bzXs4RvmzBnYdyLXauAK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

269857

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

M:\TWRK\608de6e154b8c665\src\MicrogamingInstall\2013-Release\MicrogamingInstall.pdb

kernel32

GetCurrentThreadId GetCurrentProcessId OpenFileMappingA lstrcpyA FreeLibrary CreateDirectoryW LoadLibraryW CreateFileW MultiByteToWideChar GetProcAddress LocalFree lstrcpynA GetFileAttributesA lstrcpynW GetFileAttributesW GetModuleFileNameW lstrlenW CreateDirectoryA FindFirstFileA FindClose GetModuleFileNameA FindNextFileA WideCharToMultiByte CreateProcessW SetUnhandledExceptionFilter OpenProcess CreateProcessA RemoveDirectoryA CopyFileA GetTempFileNameA GetModuleHandleA GetTempPathA DeleteFileA GetComputerNameA FormatMessageA GetVolumePathNameW CopyFileW FormatMessageW RemoveDirectoryW ReleaseMutex GetDiskFreeSpaceExA GetVersionExA DeleteFileW SetFileAttributesW CreatePipe GetExitCodeThread WaitForMultipleObjects InterlockedExchangeAdd MoveFileA GetPrivateProfileStringW LoadLibraryA CreateMutexA GetDriveTypeA GetVolumeInformationA DeviceIoControl ResetEvent MoveFileExA Process32First TerminateProcess GetSystemDirectoryA GetLocalTime Process32Next CreateToolhelp32Snapshot OutputDebugStringW QueueUserWorkItem ReleaseSemaphore GetLogicalDriveStringsA GlobalMemoryStatusEx GetSystemInfo GetCurrentThread SetThreadPriority GetThreadTimes UnregisterWaitEx VirtualProtect VirtualFree VirtualAlloc GetVersionExW FreeLibraryAndExitThread QueryDepthSList UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation GetThreadPriority SwitchToThread SignalObjectAndWait WaitForSingleObjectEx CreateTimerQueue DuplicateHandle SetEndOfFile GetFullPathNameW PeekNamedPipe GetFileInformationByHandle FileTimeToLocalFileTime SetStdHandle GetStringTypeW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetCurrentDirectoryW GetConsoleCP FlushFileBuffers FileTimeToSystemTime SystemTimeToTzSpecificLocalTime FindFirstFileExW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter SetFilePointerEx ReadConsoleW GetConsoleMode GetTimeZoneInformation CreateSemaphoreW GetModuleHandleW GetTickCount GetStartupInfoW TlsFree CreateFileMappingA lstrcmpiA InterlockedExchange lstrcatA Sleep InterlockedCompareExchange InterlockedDecrement UnmapViewOfFile InterlockedIncrement MapViewOfFile lstrlenA GetFileSize InterlockedPushEntrySList InterlockedFlushSList InterlockedPopEntrySList InitializeSListHead CloseHandle ReadFile WriteFile SetFilePointer CreateFileA CreateThread OutputDebugStringA GetLastError CreateEventA SetEvent CreateSemaphoreA WaitForSingleObject TlsSetValue TlsGetValue TlsAlloc GetCurrentProcess CreateEventW InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter DeleteCriticalSection GetCPInfo GetOEMCP GetACP IsValidCodePage IsDebuggerPresent SetLastError HeapSize GetProcessHeap IsProcessorFeaturePresent WriteConsoleW GetFileType GetStdHandle RtlUnwind RaiseException GetCurrentDirectoryA SetCurrentDirectoryA SetEnvironmentVariableA GetFullPathNameA GetDriveTypeW GetCommandLineA LeaveCriticalSection EnterCriticalSection HeapReAlloc LoadLibraryExW ExitThread GetSystemTimeAsFileTime AreFileApisANSI GetModuleHandleExW ExitProcess HeapAlloc DecodePointer EncodePointer HeapFree

user32

SetWindowLongA GetWindowLongW AppendMenuW ReleaseDC OffsetRect ChildWindowFromPoint SetWindowLongW IsDialogMessageA PeekMessageA wsprintfA SendMessageA GetClientRect IsWindowEnabled LoadIconA SetForegroundWindow GetWindowDC TrackPopupMenu SetWindowPos GetCursorPos SetLayeredWindowAttributes CreatePopupMenu CreateWindowExW DispatchMessageA MessageBoxW RegisterClassW GetSystemMetrics IsWindowVisible LoadImageA MapWindowPoints UpdateWindow PostThreadMessageA GetMessageA InvalidateRect wsprintfW CopyRect SetFocus MessageBoxA SetWindowTextA GetWindowRect PostMessageA RegisterClassA ShowWindow DefWindowProcA EnableWindow AdjustWindowRect LoadCursorA GetDlgCtrlID DefWindowProcW MoveWindow FlashWindowEx TranslateMessage GetActiveWindow wvsprintfA DestroyWindow CreateWindowExA

gdi32

DeleteDC CreateDIBSection GetDIBits DeleteObject SelectObject CreateCompatibleDC GetStockObject BitBlt

advapi32

OpenSCManagerA CloseServiceHandle OpenServiceA RegSetValueExW RegOpenKeyExW RegQueryValueExW RegSetValueW RegSetValueA RegQueryValueW RegCloseKey GetUserNameA RegOpenKeyExA RegCreateKeyExA RegQueryValueExA RegSetValueExA FreeSid SetEntriesInAclW RegEnumKeyW

shell32

SHGetMalloc SHGetSpecialFolderLocation ShellExecuteA SHGetPathFromIDListW SHGetFolderPathW Shell_NotifyIconA SHGetSpecialFolderPathA SHChangeNotify

ole32

StringFromIID CoTaskMemFree CLSIDFromProgID OleSetContainedObject OleCreate OleUninitialize CoCreateInstance CoCreateGuid CoTaskMemAlloc CoSetProxyBlanket CoUninitialize CoInitialize OleInitialize

oleaut32

VariantTimeToSystemTime VariantCopy VariantChangeType SysStringLen SysAllocString SysAllocStringLen SysFreeString VariantClear SafeArrayCreateVector SafeArrayAccessData VariantInit SafeArrayUnaccessData

wsock32

gethostbyname send WSAStartup WSACleanup closesocket socket htons inet_addr htonl WSAGetLastError ntohs getservbyport getservbyname WSASetLastError gethostbyaddr connect ioctlsocket

ws2_32

WSAAddressToStringA

wininet

InternetReadFile HttpSendRequestA InternetCrackUrlA InternetGetLastResponseInfoA InternetConnectA HttpOpenRequestA InternetSetOptionA InternetOpenUrlW InternetOpenW InternetCrackUrlW InternetOpenUrlA HttpQueryInfoA InternetCloseHandle InternetOpenA

shlwapi

StrStrA PathAppendW PathCanonicalizeW SHDeleteKeyA PathAppendA PathCanonicalizeA PathFileExistsA UrlCombineA PathFindFileNameA

netapi32

NetWkstaGetInfo NetApiBufferFree

psapi

GetModuleFileNameExA

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

urlmon

CoInternetGetSession

Sharing

General

Malware Config

Signatures

File Explorer

8934016858e51e80846edab3009b2cea_JaffaCakes118

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

wsock32

ws2_32

wininet

shlwapi

netapi32

psapi

version

urlmon

generic