086b43e77ec37495c0fded225ddf567a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

086b43e77ec37495c0fded225ddf567a_JaffaCakes118
Size

496KB
MD5

086b43e77ec37495c0fded225ddf567a
SHA1

578f37ab9c6c00997867dd09284b450bcd9d0685
SHA256

1ccedc1f692201fad8693a22d8d984a90e98d3b8d8b3c5325f919e9097474475
SHA512

412c89ae263cc55446f653d36af0f47ac119c0e7e8f965df26b99cde2fd511e90de4e07e45ed431896c864ffe5cd030774e3b3842db31ca19d0c34659e0da334
SSDEEP

6144:tH4Wcw1NYAF/Jk+tUu+vMz+aLmHhtg/h0VicDEBJ9Iy0oS9wJ:tYUjn+vMBLWg/iscQJ9a9w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
086b43e77ec37495c0fded225ddf567a_JaffaCakes118

Files

086b43e77ec37495c0fded225ddf567a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5082516ae2bcc802b70285b3936027b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Work\Global\Tencent\chn_launcher\Release\launchcrossfire.pdb

Imports

urlmon

URLDownloadToFileA

kernel32

GetLastError
InterlockedIncrement
lstrcmpiA
IsDBCSLeadByte
DebugBreak
OutputDebugStringA
SetLastError
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GetModuleFileNameA
CreateProcessA
GetCurrentDirectoryA
CreateEventA
GetProcAddress
CloseHandle
ReadFile
CreateFileA
WriteFile
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateDirectoryA
lstrcpyA
OpenEventA
lstrlenW
GetDateFormatA
GetTimeFormatA
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
SetHandleCount
GetFileType
SetStdHandle
GetTimeZoneInformation
HeapSize
Sleep
GetStdHandle
ExitProcess
FatalAppExitA
HeapCreate
HeapDestroy
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
InterlockedDecrement
GetCurrentProcess
FlushInstructionCache
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CompareStringW
RaiseException
GetCurrentThread
TlsFree
TlsSetValue
CompareStringA
FlushFileBuffers
GetLocaleInfoW
SetEndOfFile
SetConsoleCtrlHandler
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
TlsAlloc
TlsGetValue
GetOEMCP
SetEnvironmentVariableA
GetEnvironmentStringsW
GetVersionExA
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
VirtualProtect
GetSystemInfo
VirtualQuery
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointer
GetCommandLineA
GetStartupInfoA
GetCPInfo
GetUserDefaultLCID

user32

GetSystemMetrics
LoadImageA
PostMessageA
IsWindow
EndDialog
GetSysColorBrush
GetParent
GetWindow
GetWindowRect
SystemParametersInfoA
UnregisterClassA
MapWindowPoints
SetWindowPos
SendMessageA
GetDlgItem
KillTimer
SetTimer
SetWindowTextA
GetWindowLongA
DefWindowProcA
GetActiveWindow
MessageBoxA
DialogBoxParamA
DestroyWindow
CharNextA
LoadStringA
SetWindowLongA
GetClientRect

gdi32

SetTextColor
SetBkMode

advapi32

RegQueryValueExA
RegDeleteValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA

shell32

ShellExecuteA

ole32

CoFreeLibrary
CoLoadLibrary
CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

VarUI4FromStr
SysFreeString

comctl32

InitCommonControlsEx

Sections

.text
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5082516ae2bcc802b70285b3936027b0

Headers

File Characteristics

PDB Paths

Imports

urlmon

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

Sections

.text Size: 224KB - Virtual size: 223KB

.rdata Size: 32KB - Virtual size: 28KB

.data Size: 8KB - Virtual size: 24KB

.rsrc Size: 228KB - Virtual size: 226KB

.text
Size: 224KB - Virtual size: 223KB

.rdata
Size: 32KB - Virtual size: 28KB

.data
Size: 8KB - Virtual size: 24KB

.rsrc
Size: 228KB - Virtual size: 226KB