���')��J�˝ܤ�w}{d�Z�\Ȟ�>���x2�t�A�+|1�ˮ 38������P~���/>"۟��ޝJP��{���y�bm�@Yy����� ��/9��~||p���aE�O�A����j��:�!�Q)���WoQY�Ϡj�g,�rn%���>C�۰�>Ί��4DF+_ѧ������wr�d3h�*a8?✀|E����F2�<��H2-6�!Y���c뛘`^,���:Q��eD0�>J�R�z��űL��F�G��C�z�P��/Rf�Z0�t�>��������k ��t|5gO���b���LwƐ�t�j��<C�C�;y�D)�>��m�%`��*���J�w7O�/t���|k�:���6��]&��@���"�/�â��cYfY���X�!s۵�����Q �\�d ��J;�ё�_B��k�͆�\ ���&�)��[8�:\�[ʯ��Z9Ɨ�����E�z������k�����<�ѩun�z�}9����<3��0� o��©��+ϲ O餞Jo�H�x�6G�̿9&q��z'�^��X�#���86�ō�i�ʁ��5��JԙM�՟��~�(��&wY�n$obFS5�����= �l���9���O >,�%b�jc?]$)K�.�0���b"��c/����9R��3k��@p��E-����F��"�Ǥ�6 ��@ȉ�{��tw�@Jr<�1iۑ �������ŕZW�(i�Jw�jҖrl�#W����&���P9�?nr}�1��� �帰�V���u7M���_��Ŗbr2C�j�O��MG��z�}���p0<�J�]>j_ ^UL����i� Q않>IBa,�z����Y�yۃ�ڊ��I��H4Z|�gIݙM>Z��T֮��2qʒ��Q!�R�x9#�ݫ ��R+�PC�&�Dog����ݲS��ޱi���L���pm HZ��.57��'���j��cF�Xmܥ���������U���d�k��'���[��n"���3�x5P9�B�K���Wc��?�*8f�b#S��H������7? �I��ہ'��J'PN�1D�dR&�n��˓�c>L����.YDW�:�/ؔw;������(gk~nR����*5�y�s@�IR�/R��´�ٱ=�a��m'�q��7��/� pj�t��g�R����x�+��S ���T��c_��@0��R�둹�Ug�~��܉2)��"����!���J|^�~�|)n@�4�eOAݞp��ߌ8fAv=���{���Nf)�m�G��k�;FS:�}���.�����a��E��}��/�u����w���|� }��U��X���O8�K�q6�?!�!颅đ��+UA`Á�����QW6PO~��dm#݊��/�gf���,q#7����r����>�-D������a��m{��Sr�>#0?d�Y�#cN����K�_���W+s������[�o4QR@N5ES�uCg�1^'� ���[m��m�4�^+FAo�v6��켘x�MJ�8�����qt�u�J9��7�"�쨗�6�^_NGm���qL[��I/#"6�%��7-�g�|Y;����Bd����8n�wӡ7Q|QGF�EK�8�o��q�Θ�s���]�cr�f�>���|%��w��w�_D���lg��Y���E�����3:� �c�x����l*۲����Bi��|��(�@�rm.lZ2w_�A1|hj*^m��(z$������E��c-���n&����k 3��Bv�0STߺ��}���z�°w�h�� ,h��������3�<�ȃ�Vj�T�;}�R��� �����ި�QKdN¼��U;�� �ސhU�����������l%���'��F�l�0y�=Y ��!�M�b�v]���(���������4^���5C,vQ�N�u�tl/�JA��tL%ɤ����DyW6o7���,�h�z�r���*l`�Q`�|=V2��hm��ه�u���鎚h�ӎa��\��<�_Ph���6�/�]���aI 4˜U:�#v�c oA���#A8��2wd`�[�'BP�/����;��H��{�(��/�=�q����N-��C�` r�U�8�*��i�kEʬ)�^�g`���M7� E��Ϋ�ݞ�����, ���7���G���K�BQ~kԹHkк�2j���gR�@J�k����jX�,i���ia�sp,���#�B��ZJ�X����G�ҍ̞�`2�e�m��-U]���S V뿄AP�ZbI�����K����Tb7�YJ�쭦�x�%���>�heG Y��4����Q+��=4z�{a�݁���׳xJ�A��� ڤ|���Ѡ�<�����7���lCǦ�;�W2�6jΜ�%�p���C�;�(�6\�:��q,�z�]p��zB�I��2k98��tb[H#_�ӷ:E�S ~�.m��40O 4�8�q4��8' �l���˻X�%sS�P����[��2��IN���=�����l8�_��Ȳo�x�g��O-�7Յ�q�(Q|�Ke~mE2�e-։K3�u��f�gjG�}�d�V�Ɨ�d��|>P8V���9&z>Ymy���JH�.���QJ��w&WtJ��]���5zxzBf�al�l��ZR�0��hT���C�]#�_�4�u�Mpğ�lc���2#��Ā5-��k�E� U�i~�D�R��:�:q��4�`h�ܾ..��� ��Hp���Wl[�sk��V��h'�[$���T� �_CSw��d(�-A��x&sv�W���i8���[?@�����`"8(�q㵍�{�=���DbB:09{��dM.�'����Tm4�PV�F�����-QF�~EØ\�����8K)�tQ�l�CGg�,;z]�,Dh ���|�����G�$�侩c�+gX(<C�:����ZNJzvrŞ{�� ͶP��}�,��͊�J�}�*���_8>���1�������=Z\GޒZ���LTw��S;+�M�f�_���*�V�:*��%�d���M=���㵋�7��L3�B�&F��p��k\�qL����2j*�1�h:��M�|V5�{�K
Static task
static1
Behavioral task
behavioral1
Sample
Brink+13Tr-LNG/Brink+13Tr-LNG.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Brink+13Tr-LNG/Brink+13Tr-LNG.exe
Resource
win10v2004-20240226-en
General
-
Target
1960b113200ddd1492cde347dcf6cd73_JaffaCakes118
-
Size
2.0MB
-
MD5
1960b113200ddd1492cde347dcf6cd73
-
SHA1
b017c932bca022bb4da08f1caa652e6a692ccfb9
-
SHA256
9d77bbb6e8855dc6d8b701253f327f6631a88b9142d390afea3aba5d57234842
-
SHA512
98a048a3288b5f6d1d87df5533bb1e708d14c2ab6930de5329d9a37c0b63e62b686f9af4346a4c066ce75ed2633d77290d2e5f4380f5c1a04167d2cdd9f4bc79
-
SSDEEP
49152:ZfAw3WkpeXe7BKjDDap4r/KAF4zQ6vkyKTk9Nc2J6:tAwmkzBmD1/HasyKTkLY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Brink+13Tr-LNG/Brink+13Tr-LNG.exe
Files
-
1960b113200ddd1492cde347dcf6cd73_JaffaCakes118.rar
-
Brink+13Tr-LNG/Brink+13Tr-LNG - I.N.F.O - Fixed.txt
-
Brink+13Tr-LNG/Brink+13Tr-LNG.exe.exe windows:4 windows x86 arch:x86
50ce1f8eec1af6f7e1046fb2fa0fdc52
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord303
kernel32
ReadFile
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
winmm
waveOutClose
user32
MessageBoxA
Exports
Exports
Sections
.text Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 952KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.VCrypt0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.VCrypt1 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Brink+13Tr-LNG/VERY IMPORTANT!.txt