a3988ff7b70053c2cada66d9fa21e0f1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a3988ff7b70053c2cada66d9fa21e0f1_JaffaCakes118
Size 110KB
Sample240613-ddg13ssand
SHA256 0422af131c39a2779f12eb0138e1af95f969e17539e75358a17964df2d3a6e59
MD5 a3988ff7b70053c2cada66d9fa21e0f1
SHA1 6a4286b4ecfd2f8713fcca7c8cb6de015a19d6f7
SHA512 75ab0e888771376974b12ff774d6e13643b467c0787ad59ffdd95316b3e4e4f633e7254bb6de793ba631bb9460569b7459f33217fda7b53cac8120430214a7f5
SSDEEP 3072:UhxKuPWTQoDN3NkQe0y1wio/1JnzfVQoFr2F3aV:UhxKLDJNkQxy1PozfVQer2FqV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/project.igi.tr10/projectigi_trainer +10 by ILA.exe

File Explorer

a3988ff7b70053c2cada66d9fa21e0f1_JaffaCakes118

.zip 110KB
project.igi.tr10/??????.txt

593B
project.igi.tr10/??????.url

151B
project.igi.tr10/projectigi_trainer +10 by ILA.exe

.exe 222KB

a3988ff7b70053c2cada66d9fa21e0f1_JaffaCakes118

SHA256 0422af131c39a2779f12eb0138e1af95f969e17539e75358a17964df2d3a6e59
MD5 a3988ff7b70053c2cada66d9fa21e0f1
SHA1 6a4286b4ecfd2f8713fcca7c8cb6de015a19d6f7
SHA512 75ab0e888771376974b12ff774d6e13643b467c0787ad59ffdd95316b3e4e4f633e7254bb6de793ba631bb9460569b7459f33217fda7b53cac8120430214a7f5
SSDEEP 3072:UhxKuPWTQoDN3NkQe0y1wio/1JnzfVQoFr2F3aV:UhxKLDJNkQxy1PozfVQer2FqV
MD5 SHA1 SHA512 SSDEEP

project.igi.tr10/projectigi_trainer +10 by ILA.exe

IMPHASH e8d1afc7a80a63d3b1411c2cc5e88246
SHA256 49ff1bb8e1b404545f0ab0f30941ddb8ea0177902c64d899400e9eba20716ba2
MD5 dc882eb475faea189b3ec9c64ea38f2e
SHA1 7e95995d7f6681e0d50c105c9789c31ceb8ebe28
SHA512 bd5d960f137b1854bd0b6fd6a534d3fed6e064c744c3e78df66a813b721933339e33e0e9a3609c3ad356b108b7e3c9cf0eab83e96a2b5f57d73d10a10357c5f1
SSDEEP 3072:jhvxKoP4h1HRYGMf/cf8JhecfHhxGXWAPBmlDxhq2s0hKZc3R39n87DZZFn0A/:jR0xYj/cf0rfBYBDkKZWGZFn0A/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

111656

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

sndPlaySoundA timeSetEvent timeKillEvent

msvfw32

DrawDibOpen DrawDibClose DrawDibDraw

avifil32

AVIStreamGetFrame AVIStreamRelease AVIStreamGetFrameClose AVIStreamOpenFromFileA AVIStreamGetFrameOpen AVIFileInit AVIFileExit AVIStreamInfoA AVIStreamSampleToTime AVIStreamStart AVIStreamLength

kernel32

SetErrorMode FileTimeToSystemTime FileTimeToLocalFileTime HeapFree HeapAlloc HeapReAlloc GetTimeZoneInformation GetSystemTime GetLocalTime GetStartupInfoA GetCommandLineA ExitProcess RtlUnwind RaiseException CreateThread ExitThread TerminateProcess HeapSize GetACP GetEnvironmentVariableA HeapDestroy VirtualFree VirtualAlloc IsBadWritePtr LCMapStringA LCMapStringW UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr SetStdHandle CompareStringA CompareStringW SetEnvironmentVariableA GetFileTime GetFileSize GetFileAttributesA WritePrivateProfileStringA GetOEMCP GetCPInfo DeleteFileA WinExec lstrlenA lstrcatA lstrcpyA CloseHandle GetProcessVersion GlobalFlags TlsGetValue LocalReAlloc TlsSetValue TlsFree GlobalHandle TlsAlloc LocalAlloc GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileA DuplicateHandle lstrcmpA GetCurrentThread SuspendThread ResumeThread ReadProcessMemory lstrcpynA MulDiv SetLastError LocalFree MultiByteToWideChar InterlockedDecrement InterlockedIncrement FindResourceA LoadResource GetVersion GetCurrentThreadId GlobalGetAtomNameA lstrcmpiA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom GetVersionExA GetCurrentProcess GetLastError WideCharToMultiByte GetModuleHandleA SetEvent GetProcAddress FreeLibrary LoadLibraryA WaitForSingleObject CreateEventA GetTempPathA GetTickCount Sleep GetModuleFileNameA GetSystemDirectoryA SetFileAttributesA LockResource LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GlobalAlloc GlobalLock GlobalUnlock GlobalReAlloc GlobalFree OpenProcess WriteProcessMemory HeapCreate

user32

IsWindowEnabled GetNextDlgTabItem EnableMenuItem CheckMenuItem SetMenuItemBitmaps ModifyMenuA GetMenuState LoadBitmapA GetMenuCheckMarkDimensions BeginPaint EndPaint TabbedTextOutA GrayStringA CreateDialogIndirectParamA GetActiveWindow EndDialog WindowFromPoint LoadStringA DestroyMenu ValidateRect TranslateMessage GetMessageA PostQuitMessage CharUpperA GetClassNameA GetSysColorBrush ShowWindow MoveWindow IsDialogMessageA SendDlgItemMessageA MapWindowPoints PeekMessageA DispatchMessageA SetActiveWindow SetFocus AdjustWindowRectEx ScreenToClient GetTopWindow GetCapture WinHelpA wsprintfA RegisterClassA GetMenu GetWindowTextLengthA GetDlgCtrlID GetKeyState DefWindowProcA DestroyWindow CreateWindowExA CallNextHookEx GetClassLongA GetMessageTime GetMessagePos GetLastActivePopup GetForegroundWindow GetWindowLongA SystemParametersInfoA GetWindowPlacement CreateIconFromResourceEx CreateIconFromResource GetIconInfo CreateIconIndirect MessageBoxA GetWindow IsWindowVisible GetWindowTextA GetWindowThreadProcessId FindWindowA UnregisterClassA GetClassInfoA UnhookWindowsHookEx SetWindowsHookExA GetMenuItemCount RemoveMenu AppendMenuA ReleaseDC SetWindowRgn GetDlgItem SetWindowTextA IsIconic DrawIcon SetScrollRange EnableScrollBar GetScrollPos GetScrollRange SetScrollPos GetDC LoadMenuA GetCursorPos SetForegroundWindow TrackPopupMenu PostMessageA GetMenuItemID LoadIconA GetSubMenu SetMenuDefaultItem RegisterWindowMessageA UpdateWindow RemovePropA SetPropA SetWindowLongA GetPropA CallWindowProcA GetFocus GetAsyncKeyState ScrollDC DrawTextA FillRect InflateRect CopyRect DrawFocusRect SetRect SetCapture ReleaseCapture ClientToScreen PtInRect RedrawWindow SetTimer KillTimer LoadCursorA SetCursor GetSystemMetrics InvalidateRect IsWindow GetClientRect GetWindowRect GetParent OffsetRect GetSysColor EnableWindow SendMessageA SetWindowPos EnumWindows

gdi32

SetROP2 OffsetRgn CreateRectRgn CreateDIBitmap RealizePalette CreatePalette GetClipBox SetTextColor SetBkColor SaveDC RestoreDC SelectPalette SetBkMode SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx CreateBitmap MoveToEx LineTo SetTextAlign FrameRgn GetDeviceCaps PtVisible RectVisible TextOutA ExtTextOutA Escape SetPixel GetStockObject CreateFontIndirectA GetDIBits CreateFontA GetTextExtentPoint32A GetBkColor CreatePen CreateSolidBrush CreateDIBSection SelectObject ExtCreateRegion BitBlt CombineRgn DeleteObject CreateCompatibleDC DeleteDC GetObjectA CreateCompatibleBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegQueryValueExA RegOpenKeyExA RegQueryValueA RegCloseKey

shell32

ShellExecuteA Shell_NotifyIconA

comctl32

ord17

Sharing

General

Malware Config

Signatures

File Explorer

a3988ff7b70053c2cada66d9fa21e0f1_JaffaCakes118

project.igi.tr10/??????.txt

project.igi.tr10/??????.url

project.igi.tr10/projectigi_trainer +10 by ILA.exe

winmm

msvfw32

avifil32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

generic