a63bc94c7b067f7743d75f21aabe1055_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
a63bc94c7b067f7743d75f21aabe1055_JaffaCakes118
Size 4.8MB
Sample240613-srtpcsthnf
SHA256 b3fc267507a96927161a63b1db9d026045ed8c32d8be962bb4a34697973405bf
MD5 a63bc94c7b067f7743d75f21aabe1055
SHA1 9f1e3baef1667fb476dec19d6bfabda7f403cb9d
SHA512 1acb50d8b0b2bd48da524d78725fc62e5743c2787b9bb5c76b2fedbe9de6455658bf7bb6b12da103f8ad444f40eb75994ceaf579a1dbcc97f374c1f7d7d7ac48
SSDEEP 98304:B2MkJnm+yqW1c1suQoZCeQpCxQLm6kFUC2ESChEoZJPPAbr:s27c1wm6EnPPPA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a63bc94c7b067f7743d75f21aabe1055_JaffaCakes118

File Explorer

a63bc94c7b067f7743d75f21aabe1055_JaffaCakes118

.exe 4.8MB

a63bc94c7b067f7743d75f21aabe1055_JaffaCakes118

IMPHASH 28aac80e9c2aa6d3920fe8446ae08eec
SHA256 b3fc267507a96927161a63b1db9d026045ed8c32d8be962bb4a34697973405bf
MD5 a63bc94c7b067f7743d75f21aabe1055
SHA1 9f1e3baef1667fb476dec19d6bfabda7f403cb9d
SHA512 1acb50d8b0b2bd48da524d78725fc62e5743c2787b9bb5c76b2fedbe9de6455658bf7bb6b12da103f8ad444f40eb75994ceaf579a1dbcc97f374c1f7d7d7ac48
SSDEEP 98304:B2MkJnm+yqW1c1suQoZCeQpCxQLm6kFUC2ESChEoZJPPAbr:s27c1wm6EnPPPA
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2113779

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CopyFileA GetWindowsDirectoryA DuplicateHandle WritePrivateProfileStringA GetVolumeInformationA DeleteFileA FindClose GetPrivateProfileStringA WaitForSingleObject OutputDebugStringA GetCommandLineA GetSystemDirectoryA WideCharToMultiByte SwitchToThread QueryPerformanceCounter QueryPerformanceFrequency CreateSemaphoreA GetCurrentThread GetThreadPriority SetThreadPriority GetExitCodeThread ReleaseSemaphore GetLocaleInfoW SetConsoleCtrlHandler SetEndOfFile CreateProcessA GetExitCodeProcess SetEnvironmentVariableA LoadLibraryA IsBadCodePtr GetCurrentDirectoryA GetStringTypeW GetStringTypeA SetStdHandle GetUserDefaultLCID EnumSystemLocalesA GetLocaleInfoA IsValidCodePage IsValidLocale GetCurrentProcessId CreateFileA IsBadWritePtr VirtualAlloc FlushFileBuffers VirtualFree HeapCreate HeapDestroy GetVersionExA GetEnvironmentVariableA GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA UnhandledExceptionFilter GetFileType GetStdHandle SetHandleCount SetFilePointer ReadFile GetModuleFileNameA FindFirstFileA WriteFile SetUnhandledExceptionFilter HeapSize GetProcAddress LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection CloseHandle CreateEventA SetEvent DebugBreak OutputDebugStringW GetDriveTypeA ResetEvent GetProfileStringA InterlockedExchange InterlockedDecrement InterlockedIncrement MultiByteToWideChar RtlUnwind RaiseException GetLastError CreateDirectoryA FindNextFileA FileTimeToSystemTime FileTimeToLocalFileTime GetTimeZoneInformation GetSystemTime GetLocalTime GetModuleHandleA GetStartupInfoA GetVersion ExitProcess HeapFree TerminateProcess GetCurrentProcess GetFileAttributesA HeapReAlloc HeapAlloc MoveFileA GetSystemTimeAsFileTime IsBadReadPtr ResumeThread CreateThread TlsSetValue TlsGetValue ExitThread GetCPInfo GetACP GetOEMCP GetFullPathNameA FatalAppExitA LCMapStringA LCMapStringW CompareStringA CompareStringW GetCurrentThreadId TlsAlloc TlsFree SetLastError Sleep

user32

SetForegroundWindow DefWindowProcA SetCursor GetWindowRect PostQuitMessage ClientToScreen GetClientRect GetWindowLongA UpdateWindow ShowWindow GetDC SystemParametersInfoA SetWindowPos AdjustWindowRectEx GetMenu SetWindowLongA CreateWindowExA SetRect ShowCursor RegisterClassA LoadCursorA SetFocus ReleaseDC LoadIconA GetClassInfoA ToAscii MapVirtualKeyA GetKeyboardState DispatchMessageA TranslateMessage GetMessageA PeekMessageA DestroyWindow GetClassNameA ChangeDisplaySettingsA FillRect GetKeyboardLayout SetWindowTextA GetSystemMetrics wsprintfA MessageBoxA MessageBoxW GetForegroundWindow SetClassLongA CallWindowProcA GetWindow GetWindowTextA FindWindowA SendMessageA DrawTextA FrameRect

gdi32

SetDIBits DeleteDC GetDeviceCaps CreateDCA CreateDIBSection DeleteObject StretchDIBits SelectObject EndPage StretchBlt StartPage SetTextJustification GetTextExtentPoint32A GetCharacterPlacementA GetFontLanguageInfo ExtTextOutA GetCharABCWidthsA GetTextMetricsA RemoveFontResourceA AddFontResourceA SetTextAlign SetMapMode GetMapMode GetTextAlign GetTextColor GetBkColor GetBkMode SetTextColor SetBkColor SetBkMode CreateSolidBrush CreateCompatibleDC CreateFontA BitBlt StartDocA EndDoc

ole32

CoUninitialize CoInitialize CoCreateInstance

oleaut32

VariantInit VariantClear

dsound

ord2 ord1

winmm

timeSetEvent mixerSetControlDetails mixerGetLineInfoA mixerGetDevCapsA mixerClose mixerGetLineControlsA mixerGetNumDevs mixerGetControlDetailsA mmioInstallIOProcA mmioAscend mmioRead mmioDescend mmioOpenA mixerOpen timeGetTime waveOutOpen waveOutPrepareHeader mmioSeek mmioClose waveOutClose waveOutUnprepareHeader waveOutReset timeEndPeriod timeBeginPeriod waveOutSetPlaybackRate waveOutSetVolume waveOutPause waveOutRestart waveOutWrite timeKillEvent

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

spr

Spw_AffTexture Spw_Load Spr_Init Spr_Gett Spr_Modoff Spr_GetNb Spr_TexturePal16 Spr_TexturePal32 Spw_zonetexture Spr_zonetexture Spr_Getz Spr_AffTexture Spr_AffTrs Spr_Aff Spr_Collision Spw_Collision Spr_FileFonction Spw_Aff Spw_Getz Spr_Load Spw_FlushComp Spr_Release

d3d9

Direct3DCreate9

dinput8

DirectInput8Create

ijl15

ord2 ord3 ord4

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

shell32

DragQueryFileA

advapi32

RegDeleteKeyA RegOpenKeyExA RegCloseKey RegSetValueExA

Name

.text

Size

3.7MB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

656KB

Virtual Size

654KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

292KB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

12KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

8KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

188KB

Virtual Size

185KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=7, id=12, version=7291,

count=43, id=14, version=7299,

count=15, id=11, version=8047,

count=6, id=10, version=8047,

count=2, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=32, id=49, version=9044,

count=21, id=10, version=8966,

count=1, id=11, version=8447,

count=1, id=10, version=8447,

count=30, productName=Unmarked objects (old),

count=3, id=28, version=9178,

count=4, id=25, version=9210,

count=1, id=49, version=8943,

count=1, id=11, version=8966,

count=3, id=11, productName=VS98 (6.0) build 8168, version=8168,

count=4, id=19, version=8022,

count=19, id=19, version=8034,

count=280, id=1, productName=Unmarked objects,

count=5, id=18, version=8444,

count=207, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=244, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,

count=8, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,