a4725130e3974601b01195c8a878f1e7_JaffaCakes118
- SHA256 b6e83a6405e55f1a8bbfc3199c59df10a40dd5e0afeae99c7931524f09a498c4
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Ashes of the Singularity Escalation Promo Trainer.exe
Resource
win7-20231129-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ashes of the Singularity Escalation Promo Trainer.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
4 signatures
150 seconds
General
- Target a4725130e3974601b01195c8a878f1e7_JaffaCakes118
- Size 623KB
- Sample240613-jd3wfazapc
- SHA256 b6e83a6405e55f1a8bbfc3199c59df10a40dd5e0afeae99c7931524f09a498c4
- MD5 a4725130e3974601b01195c8a878f1e7
- SHA1 259534a22b70ebecd420b206251331e80cc974bf
- SHA512 c679980887d835b251e5b8f8e5cd0cacdecbc4eae2d7d0db76499fe22d5b5f07e62a945e6d6eb4a2d915690c9173cc404aa71f0aa8a8728472ec42973da2e6d4
- SSDEEP 12288:bLNNckTGNTgVgtavwTorudZ681tuavQaDixHDJJx7Gnp1bWEoI3fNz:FNc70CqwT2kZ681tureizJx7Op1bWEou
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Ashes of the Singularity Escalation Promo Trainer.exe
File Explorer
-
a4725130e3974601b01195c8a878f1e7_JaffaCakes118.zip 623KB
-
Ashes of the Singularity Escalation Promo Trainer.exe.exe 1.0MB
-
ashespromo-readme.txt3KB
Ashes of the Singularity Escalation Promo Trainer.exe
- IMPHASH 3950f32a41806045f8732071785f79f6
- SHA256 97ddbce400b4997539dd26141bc9fa919d6f01b650c6d4e00ca52615b8eb190e
- MD5 83935472894dc2a57d57356dd85faf58
- SHA1 b1fd8e761e61086fdf717ea988ef98af17417c11
- SHA512 cea4a928b830f5b5a03a89f16255937b53662a8b2ce4fc0ade114c12c120467dd120114912784980e6ae92f6b1152f6b6ded78a1baa00447ad605d859cb9006d
- SSDEEP 24576:39WNNYaPyjJoYE9k1RCVezFMcIPTfwQmilHAxxayijJBV1Ls2wBP:3eNrcuk1RC9TtmKgxxayQJBV1Ls2wB
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
msvcrt
memset
memmove
sprintf
strstr
strncmp
strncpy
_strnicmp
_strdup
free
fseek
fread
fclose
ftell
memcpy
log10
fopen
strlen
strcpy
strcmp
strcat
memcmp
longjmp
_setjmp
_stricmp
tolower
fmodf
fabs
malloc
ceil
floor
pow
??3@YAXPEAX@Z
realloc
_errno
calloc
toupper
perror
atan
fprintf
log
cos
sin
ldexp
qsort
exp
sqrt
exit
acos
frexp
memchr
modf
strerror
abort
atof
_gmtime64
fflush
ferror
remove
fwrite
sinf
cosf
abs
kernel32
GetModuleHandleA
HeapCreate
IsDebuggerPresent
OpenProcess
GetTickCount
ReadProcessMemory
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
WaitForSingleObject
GetExitCodeThread
VirtualFreeEx
CloseHandle
CreateToolhelp32Snapshot
Module32First
Module32Next
VirtualProtectEx
HeapDestroy
ExitProcess
GetCurrentProcess
VirtualQueryEx
GetProcAddress
GetLastError
HeapFree
TlsGetValue
HeapAlloc
TlsSetValue
TlsAlloc
GetCurrentThreadId
InitializeCriticalSection
EnterCriticalSection
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore
LeaveCriticalSection
WaitForMultipleObjects
LoadLibraryA
CreateFileA
GetFileSize
ReadFile
Sleep
FreeLibrary
GetCurrentProcessId
GetCommandLineA
GetModuleFileNameA
CreatePipe
GetStdHandle
CreateProcessA
TerminateProcess
RtlLookupFunctionEntry
RtlVirtualUnwind
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
WideCharToMultiByte
MultiByteToWideChar
GlobalLock
GlobalSize
GlobalUnlock
GlobalAlloc
GlobalFree
HeapReAlloc
GetModuleHandleW
GetVersionExA
QueryPerformanceFrequency
QueryPerformanceCounter
SetLastError
GetCurrentDirectoryA
CreateDirectoryA
GetTempPathA
SetCurrentDirectoryA
SetFileAttributesA
DeleteFileA
CopyFileA
GetDriveTypeA
FindFirstFileA
FindClose
GetFileAttributesA
WriteFile
SetFilePointer
MulDiv
DeleteCriticalSection
user32
GetForegroundWindow
GetWindowThreadProcessId
GetKeyboardState
GetAsyncKeyState
ShowWindow
SetClassLongPtrA
RedrawWindow
GetWindowLongPtrA
WindowFromPoint
SendMessageA
FindWindowA
GetKeyNameTextA
MapVirtualKeyA
PeekMessageA
RegisterHotKey
UnregisterHotKey
CharUpperA
CharLowerA
MessageBoxA
DefWindowProcA
GetWindowTextLengthA
GetWindowTextA
EnableWindow
DestroyWindow
UnregisterClassA
LoadIconA
LoadCursorA
RegisterClassExA
IsWindowEnabled
GetSystemMetrics
CreateWindowExA
SetWindowLongPtrA
SetFocus
CreateAcceleratorTableA
SetForegroundWindow
BringWindowToTop
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
DestroyAcceleratorTable
IsWindowVisible
EnumWindows
SetWindowPos
BeginPaint
EndPaint
GetWindowRect
GetParent
MapWindowPoints
MoveWindow
InvalidateRect
SetWindowTextA
GetIconInfo
UpdateWindow
ReleaseCapture
DrawStateA
SetCapture
CallWindowProcA
ScreenToClient
GetPropA
RemovePropA
SetPropA
SetScrollPos
GetDC
InflateRect
ReleaseDC
GetWindowDC
GetClientRect
SetScrollInfo
GetScrollPos
GetScrollRange
FillRect
GetSysColor
GetSysColorBrush
GetFocus
GetClassNameA
EnumPropsExA
GetWindow
SetActiveWindow
DestroyIcon
RegisterClassA
AdjustWindowRectEx
GetMenu
DefFrameProcA
EnumChildWindows
PostMessageA
GetActiveWindow
MsgWaitForMultipleObjects
GetKeyState
IsChild
RegisterWindowMessageA
GetCursorPos
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
DrawIconEx
CopyImage
CreateIconFromResourceEx
CreateIconFromResource
gdi32
CreatePatternBrush
GetStockObject
GetObjectType
GetObjectA
DeleteObject
ExcludeClipRect
SetTextColor
SetBkColor
SelectObject
GetTextExtentPoint32A
CreateSolidBrush
GetDeviceCaps
SelectPalette
RealizePalette
GetDIBits
SetPixelV
Rectangle
Ellipse
CreateCompatibleDC
BitBlt
DeleteDC
SetStretchBltMode
StretchDIBits
StretchBlt
SetBkMode
MoveToEx
TextOutA
SetROP2
GetPixel
ExtFloodFill
CreatePen
LineTo
SetTextAlign
RoundRect
CreateFontIndirectA
GetTextMetricsA
CreateCompatibleBitmap
GdiGetBatchLimit
GdiSetBatchLimit
SetBrushOrgEx
CreateDIBSection
CreateBitmap
SetPixel
CreateDCA
CreateFontA
advapi32
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
GetCurrentHwProfileA
ole32
CoInitialize
OleInitialize
CreateStreamOnHGlobal
GetHGlobalFromStream
RevokeDragDrop
OleCreate
OleSetContainedObject
shell32
ShellExecuteExA
winmm
timeBeginPeriod
gdiplus
GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipDeleteMatrix
GdipDeletePen
GdipDeleteStringFormat
GdipFree
GdipGetDpiX
GdipGetDpiY
urlmon
URLDownloadToFileA
wininet
InternetGetConnectedState
comctl32
InitCommonControlsEx
oleaut32
SysFreeString
SysAllocString
VariantInit
DispGetParam
VariantClear
SysStringLen
SysAllocStringLen
Name
.code
Size
112KB
Virtual Size
112KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.text
Size
452KB
Virtual Size
452KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
64KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
312KB
Virtual Size
321KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
73KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
ashespromo-readme.txt
- SHA256 3d80ab6d52dc4b74bdfe19d3b4101a3b42c52ccbecb5c5520553249199514fb3
- MD5 c107b1f0cf4fd2d42d6ccdb841101b3b
- SHA1 4e50c4bde96a86abd35c08ddb92845b81befd7bf
- SHA512 aec9cc3ebd10bf072e9378e842395ef1dcd546a7087fe69c4ab7e2492d82a7e89e999416cf14484747f136b5646ce47320eb4045b360bb307559ea662f436dee
- MD5 SHA1 SHA512