286b839350478568dc275c98ee27bab9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

286b839350478568dc275c98ee27bab9_JaffaCakes118
Size

560KB
MD5

286b839350478568dc275c98ee27bab9
SHA1

748e883854caf88ed4122aa2bd6bdcf7a0554603
SHA256

9436cdfeac118438854e35294834bc858035ae3e608562274bbb4b06272e262e
SHA512

d3be3ce284c1f4132a686519dc4fd27efbf97c3e8e20ced7fbaf8e0ba65617080927d7f1a9497ca25678dddfbbeffb5fc1af5e1d32ccdadeed40929368b605d7
SSDEEP

6144:mrGf0xH/SX6mMhYqJwYCRBFb+Ijo7I00ffAyDTNmd5X6XyVeJIYZtFN90Gxz26:mrTxH/y6mwlwY8n+vIAyDTNj79J26

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
286b839350478568dc275c98ee27bab9_JaffaCakes118

Files

286b839350478568dc275c98ee27bab9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c4ce64b5bad9e6ee32beaaf451c55e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\VTC Works\Working\CF Launcher 3.0.0.5 (01_12_2008)\bin\Crossfire.pdb

Imports

version

VerQueryValueA

kernel32

GetStartupInfoW
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
TerminateProcess
ExitThread
CreateThread
VirtualProtect
VirtualAlloc
VirtualQuery
HeapSize
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
GetTickCount
VirtualFree
QueryPerformanceCounter
SetUnhandledExceptionFilter
IsBadWritePtr
GetOEMCP
GetCPInfo
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetStdHandle
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
SetEnvironmentVariableA
FileTimeToLocalFileTime
SetErrorMode
GetVolumeInformationW
FindFirstFileW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
InterlockedIncrement
FileTimeToSystemTime
GlobalFindAtomW
lstrlenA
LoadLibraryA
GetVersionExA
GetModuleHandleA
InterlockedDecrement
SetLastError
MulDiv
FormatMessageW
lstrcpynW
LocalFree
WritePrivateProfileStringW
GlobalUnlock
GlobalFree
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
SetThreadPriority
GetCurrentThread
GetCurrentThreadId
GlobalLock
lstrcmpW
lstrcmpA
lstrcmpiA
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
GlobalAddAtomW
GlobalGetAtomNameW
GlobalDeleteAtom
GetVersion
GetCurrentProcess
CreateMutexW
ReleaseMutex
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetFileAttributesW
CreateDirectoryW
lstrcmpiW
GetFileTime
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetFullPathNameW
GetWindowsDirectoryW
LoadLibraryW
FreeLibrary
GlobalAlloc
GetModuleHandleW
GetProcAddress
CreateFileA
WriteFile
GetCurrentProcessId
CloseHandle
CreateFileW
GetShortPathNameW
GetModuleFileNameW
CreateProcessW
GetLastError
GetSystemInfo
HeapCreate
HeapAlloc
HeapReAlloc
HeapFree
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
GetUserDefaultLangID
FreeResource
RemoveDirectoryA
GetModuleFileNameA
CreateDirectoryA
DeleteFileW
CreateProcessA
ResumeThread
CreateEventA
lstrcatW
lstrlenW
WinExec
lstrcpyW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapDestroy

user32

InvalidateRgn
CopyAcceleratorTableW
CharNextW
CharUpperW
GetSysColorBrush
ReleaseCapture
SetCapture
IsRectEmpty
FindWindowW
WinHelpW
GetCapture
CreateWindowExW
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageA
IsChild
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
LoadIconW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
ShowScrollBar
GetMenu
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoW
RegisterClassW
DefWindowProcW
CallWindowProcW
SystemParametersInfoA
GetWindowPlacement
SystemParametersInfoW
GetMenuItemInfoW
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
UnhookWindowsHookEx
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
PostThreadMessageW
GetWindowTextW
GetScrollPos
SetScrollPos
SetFocus
GetMenuItemID
GetMenuItemCount
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
EndDialog
SetMenuItemBitmaps
GetFocus
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
MessageBoxW
IsWindowEnabled
ShowOwnedPopups
PostQuitMessage
RegisterWindowMessageW
BroadcastSystemMessageW
UnregisterClassW
SetForegroundWindow
GetLastActivePopup
IsWindowVisible
BringWindowToTop
UpdateWindow
LoadCursorW
CopyIcon
MessageBeep
GetMessagePos
KillTimer
SetTimer
ReleaseDC
GetDC
ScreenToClient
PtInRect
IsWindow
PostMessageW
RegisterClipboardFormatW
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
SetWindowLongW
RedrawWindow
LoadMenuW
GetIconInfo
GetSubMenu
TrackPopupMenuEx
SetCursor
DestroyCursor
DestroyMenu
GetWindowLongW
WindowFromPoint
GetParent
GetNextDlgTabItem
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
SetMenu
TranslateAcceleratorW
GetNextDlgGroupItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetWindowRect
DrawFocusRect
FrameRect
FillRect
OffsetRect
InflateRect
CopyRect
GetSysColor
DrawStateW
DestroyIcon
wsprintfW
SetRect
GetSystemMetrics
EnableWindow
LoadImageW
GetClientRect
SetWindowRgn
IsIconic
GetSystemMenu
SendMessageW
AppendMenuW
DrawIcon
GetWindowTextLengthW
IntersectRect

gdi32

CreatePen
CreateSolidBrush
CreateRectRgnIndirect
GetMapMode
LPtoDP
Ellipse
GetBkColor
GetTextColor
GetRgnBox
MoveToEx
LineTo
GetClipBox
SetMapMode
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
DeleteDC
DeleteObject
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
GetTextExtentPoint32W
CreateFontIndirectW
StretchBlt
CreateCompatibleBitmap
CreateBitmap
SetBkColor
SetTextColor
GetStockObject
CreateDIBSection
ExtCreateRegion
CombineRgn
CreateRectRgn
CreateEllipticRgn
CreateFontW
GetObjectW
CreateCompatibleDC
SelectObject
BitBlt

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegQueryValueW
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegQueryValueExW
RegCloseKey
RegOpenKeyW
RegEnumKeyW

shell32

ShellExecuteExW
DragFinish
DragQueryFileW
ShellExecuteW

comctl32

ord17
_TrackMouseEvent
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
StrFormatByteSizeW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
CoGetClassObject
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries

oleaut32

SysFreeString
OleCreateFontIndirect
SysAllocString
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysStringLen
VariantInit
VariantChangeType
SysAllocStringLen
VariantClear

urlmon

URLDownloadToFileW

Sections

.text
Size: 236KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c4ce64b5bad9e6ee32beaaf451c55e2

Headers

File Characteristics

PDB Paths

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

Sections

.text Size: 236KB - Virtual size: 232KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 16KB - Virtual size: 30KB

.rsrc Size: 1.7MB - Virtual size: 1.7MB

.text
Size: 236KB - Virtual size: 232KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 16KB - Virtual size: 30KB

.rsrc
Size: 1.7MB - Virtual size: 1.7MB