220fb3dd176b690fe4253eb71ad7bf40_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

220fb3dd176b690fe4253eb71ad7bf40_JaffaCakes118
Size

512KB
MD5

220fb3dd176b690fe4253eb71ad7bf40
SHA1

0e10f604a3a2b644c0d4f9ae657a9684e6d25e5e
SHA256

7adc3fb40fb6c8c0053fafa78b38576bdb64450f49c4b437326bab727da160bf
SHA512

ab3a7a49c7ef3e25d087b3d4770c2a93fdbfc73cb041643fbfbe3f28d60dc301dac0d9d2cede764ad2f67785a33ad45c527627a2bf5f3fcfe1e5747f10a62a3c
SSDEEP

6144:6t0A9LPijpgbHZPyWFDBywh+jy/OiyRgtnENE3ILJkQNdju4:7A9rijpgNfF09jy/OItEK30kQLi4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
220fb3dd176b690fe4253eb71ad7bf40_JaffaCakes118

Files

220fb3dd176b690fe4253eb71ad7bf40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4bc47b1b60a84bd791e872571ef947cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\workspace\fun player\rel2.4.6\src\plugin\funscr\funscr\release\FunScr.pdb

Imports

wininet

InternetGetConnectedState
InternetOpenA
InternetReadFile
InternetOpenUrlW
HttpQueryInfoA
InternetSetOptionA
HttpQueryInfoW
InternetCloseHandle

kernel32

GlobalAlloc
DeleteFileW
GetCurrentThreadId
lstrlenW
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
GlobalUnlock
GlobalLock
SetLastError
GlobalFree
GlobalHandle
lstrcmpW
MulDiv
GetModuleFileNameW
FreeLibrary
LoadLibraryExW
GetModuleHandleW
FreeResource
CloseHandle
WriteFile
CreateFileW
WaitForSingleObject
GetPrivateProfileStringW
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetConsoleMode
GetConsoleCP
GetCurrentProcess
WideCharToMultiByte
GetLocaleInfoW
IsValidCodePage
GetOEMCP
GetCPInfo
SetConsoleCtrlHandler
EnterCriticalSection
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
Sleep
ExitProcess
GetCurrentThread
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetModuleFileNameA
GetStdHandle
FatalAppExitA
HeapCreate
GetStartupInfoW
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CreateThread
ExitThread
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
FlushInstructionCache
MultiByteToWideChar
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
SetFilePointer
LeaveCriticalSection
RaiseException
CreateFileA
FlushFileBuffers
CompareStringA
InterlockedExchange
CompareStringW
SetEnvironmentVariableA
GetACP
GetLocaleInfoA
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcAddress
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetVersionExA
GetThreadLocale
GetSystemTimeAsFileTime

user32

DefWindowProcW
UnregisterClassA
SetWindowTextW
GetWindowTextW
CharNextW
DestroyWindow
RegisterClassExW
SetWindowLongW
GetWindowLongW
ShowWindow
DispatchMessageW
TranslateMessage
PeekMessageW
GetWindowTextLengthW
ReleaseCapture
GetSystemMetrics
LoadImageW
GetCursorPos
CreateAcceleratorTableW
PostQuitMessage
GetWindowRect
SystemParametersInfoW
MapWindowPoints
IsDialogMessageW
SetWindowContextHelpId
PostMessageW
CreateWindowExW
MapDialogRect
IsWindow
SendMessageW
GetFocus
GetWindow
SetFocus
DestroyAcceleratorTable
GetDesktopWindow
BeginPaint
EndPaint
CallWindowProcW
FillRect
LoadCursorW
GetClassNameW
GetDlgItem
GetParent
IsChild
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
ClientToScreen
GetClientRect
SetWindowPos
MoveWindow
GetSysColor
CreateDialogIndirectParamW
RegisterWindowMessageW
GetClassInfoExW
GetMessageW

gdi32

GetObjectW
CreateSolidBrush
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC
GetStockObject

advapi32

RegOpenKeyExW
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW

shell32

SHGetSpecialFolderPathW
SHCreateDirectoryExW

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
StringFromGUID2
OleLockRunning
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoInitialize

oleaut32

CreateErrorInfo
SetErrorInfo
GetErrorInfo
VariantChangeType
DispCallFunc
LoadTypeLi
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString
VarUI4FromStr
SysStringByteLen
VariantInit
VariantClear
OleCreateFontIndirect
LoadRegTypeLi

shlwapi

PathFileExistsW

comctl32

InitCommonControlsEx

Sections

.text
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4bc47b1b60a84bd791e872571ef947cb

Headers

File Characteristics

PDB Paths

Imports

wininet

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Sections

.text Size: 212KB - Virtual size: 211KB

.rdata Size: 36KB - Virtual size: 34KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 248KB - Virtual size: 244KB

.text
Size: 212KB - Virtual size: 211KB

.rdata
Size: 36KB - Virtual size: 34KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 248KB - Virtual size: 244KB