a2a758901513eb4e82b4d3d5072a7505_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a2a758901513eb4e82b4d3d5072a7505_JaffaCakes118
Size 4.0MB
Sample240612-17cpsawflm
SHA256 4610fd42553e6a61a0603b02b806a3042a55bf1d8d194fd180ddc79dfd498b36
MD5 a2a758901513eb4e82b4d3d5072a7505
SHA1 fea3289d5376a20becfa987d4c5fbad70846079a
SHA512 40dbafdadd4868ff1f08ca257f4a017013ddf6765f0f84bce488bc60f4c1599bcbc6631050ade495c41759d62326b920017b188a6d6928746b30dae78ba17022
SSDEEP 98304:lIwhvj3kX+EJ025Irmh+7K8/+ZIoW/sqV/CUt3Iwhvj3kX+EJ025Irmh+7K8/+ZN:lIQb3kX+EJ025Irmh+7K8/+ZIoW/sqFY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2a758901513eb4e82b4d3d5072a7505_JaffaCakes118

File Explorer

a2a758901513eb4e82b4d3d5072a7505_JaffaCakes118

.exe 4.0MB

a2a758901513eb4e82b4d3d5072a7505_JaffaCakes118

IMPHASH 06cee34b87249fdc3b37799b59fa90c3
SHA256 4610fd42553e6a61a0603b02b806a3042a55bf1d8d194fd180ddc79dfd498b36
MD5 a2a758901513eb4e82b4d3d5072a7505
SHA1 fea3289d5376a20becfa987d4c5fbad70846079a
SHA512 40dbafdadd4868ff1f08ca257f4a017013ddf6765f0f84bce488bc60f4c1599bcbc6631050ade495c41759d62326b920017b188a6d6928746b30dae78ba17022
SSDEEP 98304:lIwhvj3kX+EJ025Irmh+7K8/+ZIoW/sqV/CUt3Iwhvj3kX+EJ025Irmh+7K8/+ZN:lIQb3kX+EJ025Irmh+7K8/+ZIoW/sqFY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

760049

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\svn\APPS\GMGameStart\bin\release_static\GMUnPacker.pdb

wininet

InternetOpenW InternetCloseHandle InternetSetOptionA InternetOpenUrlA InternetOpenA InternetOpenUrlW HttpQueryInfoW InternetReadFile InternetSetOptionW

msimg32

AlphaBlend

comctl32

_TrackMouseEvent

riched20

ord4

kernel32

SizeofResource LockResource GetLastError FreeResource GetProcAddress GetProcessHeap GetFileAttributesW SetFileAttributesW FindResourceW TerminateProcess FreeLibrary ExpandEnvironmentStringsW GetCurrentThreadId ResumeThread CreateEventW SetFileTime FindClose GetLogicalDriveStringsW GetDriveTypeW GetVolumeInformationW GetDiskFreeSpaceW SuspendThread GetExitCodeProcess CreateDirectoryW RemoveDirectoryW GetSystemInfo lstrcpyW InterlockedDecrement SetPriorityClass QueryPerformanceCounter GetVersionExW MultiByteToWideChar LoadLibraryW LocalFree GetTickCount WideCharToMultiByte GetFullPathNameW GetTempFileNameW SetCurrentDirectoryW GetTempPathW GetSystemDirectoryW HeapFree GetCurrentDirectoryW GetLongPathNameW lstrcmpiW ReleaseSemaphore CreateSemaphoreW MulDiv InterlockedIncrement GlobalFree GlobalAlloc GlobalUnlock GlobalLock GetSystemTimeAsFileTime GetModuleHandleA SetLastError LocalAlloc CreateProcessA lstrcmpW VerifyVersionInfoW VerSetConditionMask lstrcmpA GetOEMCP GetACP HeapSize TlsFree TlsSetValue TlsAlloc TlsGetValue GetStringTypeW GetStringTypeA ExitProcess GetCPInfo LCMapStringW LCMapStringA RaiseException HeapReAlloc RtlUnwind CreateThread ExitThread GetStartupInfoW GetVersionExA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter InterlockedExchange GetCurrentProcess LoadLibraryExW HeapAlloc LoadResource DeleteCriticalSection EnterCriticalSection LeaveCriticalSection InitializeCriticalSection CreateProcessW CreateFileW GetConsoleCP GetConsoleMode FlushFileBuffers GetTimeZoneInformation FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCurrentProcessId GetUserDefaultLCID ReadFile GetLocaleInfoA EnumSystemLocalesA IsValidLocale lstrlenW SetFilePointer GetFileSize SetEndOfFile MoveFileW FindNextFileW DeleteFileW OutputDebugStringW FindFirstFileW SetEvent ResetEvent WritePrivateProfileStringW GetModuleFileNameA CreateFileA CloseHandle lstrlenA WriteFile lstrcpyA Sleep lstrcatA GetPrivateProfileStringW GetCommandLineW FormatMessageW WaitForSingleObject GetModuleFileNameW GetPrivateProfileIntW GetTempPathA GetModuleHandleW IsValidCodePage HeapDestroy HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType LoadLibraryA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle GetLocaleInfoW CompareStringA CompareStringW SetEnvironmentVariableA GetThreadLocale DeviceIoControl GetStartupInfoA

user32

DrawFocusRect CharNextW ClientToScreen GetSysColor SetCursor IntersectRect LoadBitmapW EnableWindow DestroyIcon LoadImageW GetClassInfoExW GetPropW SetPropW CallWindowProcW DefWindowProcW RegisterClassW RegisterClassExW LoadCursorW CharNextA GetFocus GetUpdateRect GetDC IsWindowEnabled TranslateMessage GetCursorPos GetMessageW EndPaint CreateCaret DestroyWindow InvalidateRect IsWindow RedrawWindow IsRectEmpty CopyImage DrawIconEx DrawTextW FillRect CharPrevW ChildWindowFromPointEx GetAsyncKeyState SetFocus ShowCaret GetMonitorInfoW CreateWindowExW TranslateAcceleratorW BeginPaint ReleaseCapture PtInRect UpdateLayeredWindow SetWindowRgn SetCaretPos DispatchMessageW GetKeyState ReleaseDC SendMessageW HideCaret ScreenToClient MonitorFromWindow LoadStringW GetActiveWindow GetWindowRect GetParent OffsetRect MoveWindow IsIconic IsChild GetClientRect MapWindowPoints GetWindow GetWindowTextW IsZoomed SystemParametersInfoW GetWindowTextLengthW SetForegroundWindow wsprintfW MessageBoxW PostMessageW SetWindowTextW KillTimer GetSystemMetrics IsWindowVisible wsprintfA SetTimer PostQuitMessage ShowWindow SetWindowLongW GetWindowLongW SetWindowPos DestroyAcceleratorTable InvalidateRgn CreateAcceleratorTableW SetCapture

gdi32

MoveToEx CreateSolidBrush GetClipBox CreateCompatibleBitmap CreateEllipticRgn CombineRgn CreateRectRgnIndirect GetTextMetricsW GetObjectW ExtTextOutW RoundRect ExtSelectClipRgn GetBitmapBits TextOutW SetBitmapBits SetBkMode GetCharABCWidthsW GetTextExtentPoint32W SetStretchBltMode StretchBlt CreateCompatibleDC CreateFontIndirectW CreateDIBSection SetBkColor SetTextColor GetDeviceCaps SelectObject GetStockObject DeleteDC EnumFontsW DeleteObject CreatePen BitBlt LineTo Rectangle CreateRectRgn CreateRoundRectRgn SelectClipRgn

advapi32

AllocateAndInitializeSid RegEnumKeyW RegDeleteValueW RegQueryValueExW RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegEnumValueW RegEnumKeyExW RegDeleteKeyW FreeSid RegQueryInfoKeyW CheckTokenMembership

shell32

SHGetFileInfoW ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFolderPathW SHGetSpecialFolderPathW ShellExecuteW ShellExecuteA

ole32

CoUninitialize CoCreateInstance CoInitializeEx CoInitializeSecurity CoSetProxyBlanket CLSIDFromProgID CLSIDFromString DoDragDrop CreateStreamOnHGlobal OleLockRunning OleDuplicateData ReleaseStgMedium CoInitialize

oleaut32

VariantClear OleLoadPicture SysAllocString SysFreeString

shlwapi

StrStrIW PathGetArgsW StrStrIA

Sharing

General

Malware Config

Signatures

File Explorer

a2a758901513eb4e82b4d3d5072a7505_JaffaCakes118

wininet

msimg32

comctl32

riched20

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

generic