68abcde737417b3708a4a1735e74baf6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

68abcde737417b3708a4a1735e74baf6_JaffaCakes118
Size

3.4MB
MD5

68abcde737417b3708a4a1735e74baf6
SHA1

b866ca4e4506b712dd0248da4ae9989a5751531c
SHA256

bcaf76f0ad9ae07d8978aaf3d63e1fc28dacd51b2e281aa0b390faab95a40e99
SHA512

7f67bc32f4df5cee341c56d0b0a9f1b190d5ba822324b0e8be04fcad43c9e875149c57abd1db76f1f215770ecf1368a5bcecb616b506aa90633dae44b2dd05ba
SSDEEP

49152:OJeQZLbrwpTAI0UeZrwMud1pgtfHOMOI3sdDZczd9d24iRs:OJRIpT9LetwMpZuMH38DZczzd24

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68abcde737417b3708a4a1735e74baf6_JaffaCakes118

Files

68abcde737417b3708a4a1735e74baf6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d6ab0ba063cb474a713026895debb55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\炫舞I\star tune\star_0.8.1\OffLinePatch_NewTest\OffLinePatch\Release\Patcher.pdb

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

GetThreadLocale
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetCPInfo
GetOEMCP
FileTimeToSystemTime
SetErrorMode
FileTimeToLocalFileTime
GetTickCount
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitProcess
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
CreateThread
GetCommandLineA
SetEndOfFile
GetStartupInfoA
HeapSize
LCMapStringA
LCMapStringW
GetACP
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
GetTimeZoneInformation
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileW
SetEnvironmentVariableA
UnlockFile
LockFile
FlushFileBuffers
GlobalFlags
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
InterlockedDecrement
GetModuleFileNameW
WritePrivateProfileStringA
FreeResource
GetCurrentProcessId
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetModuleFileNameA
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
lstrcmpA
FreeLibrary
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
SetLastError
SetFileAttributesA
WriteFile
SetFileTime
GetCurrentDirectoryA
GetFileAttributesA
LocalFileTimeToFileTime
SystemTimeToFileTime
ReadFile
SetFilePointer
OutputDebugStringA
CreateToolhelp32Snapshot
Process32First
Process32Next
ResumeThread
SetEvent
Sleep
SetThreadPriority
ExitThread
GetExitCodeThread
TerminateThread
SuspendThread
CreateEventA
FindResourceA
LoadResource
LockResource
SizeofResource
lstrlenA
CompareStringW
CompareStringA
GetVersion
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
FindFirstFileA
FindNextFileA
FindClose
MoveFileA
GetFileTime
CreateFileA
GetFileSize
CloseHandle
CopyFileA
DeleteFileA
RemoveDirectoryA
CreateDirectoryA
MoveFileExA
GetLastError
FormatMessageA
LocalFree
GetProcessHeap

user32

IsRectEmpty
SetRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
UnregisterClassA
DestroyMenu
RegisterClipboardFormatA
PostThreadMessageA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
PtInRect
DefWindowProcA
CallWindowProcA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
SetFocus
ShowWindow
MoveWindow
SetWindowLongA
CopyAcceleratorTableA
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GrayStringA
DrawTextExA
TabbedTextOutA
UnhookWindowsHookEx
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
ReleaseCapture
GetParent
SetCapture
CharNextA
LoadCursorA
GetSysColorBrush
GetCapture
GetActiveWindow
ClientToScreen
RegisterWindowMessageA
WinHelpA
IsChild
GetClassLongA
GetDlgCtrlID
GetClassNameA
GetSysColor
DrawTextA
DrawFocusRect
FillRect
InflateRect
CopyRect
LoadImageA
SetWindowRgn
PostMessageA
KillTimer
SetTimer
RedrawWindow
InvalidateRect
UpdateWindow
GetDesktopWindow
GetSystemMetrics
LoadIconA
EnableWindow
GetClientRect
GetWindowRect
IsIconic
SendMessageA
DrawIcon
LoadBitmapA
CharUpperA
wsprintfA
MessageBoxA
ScreenToClient

gdi32

Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
ExtTextOutA
CreateSolidBrush
CreateFontIndirectA
CreateRectRgnIndirect
GetMapMode
DPtoLP
GetBkColor
GetTextColor
GetRgnBox
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
GetObjectA
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
CreateDIBSection
SelectObject
StretchBlt
DeleteDC
DeleteObject
GetStockObject
GetPixel
CombineRgn
CreateRectRgn

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHCreateDirectoryExA

comctl32

ord17

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
OleInitialize
CoTaskMemFree
OleUninitialize
CoRegisterMessageFilter
OleFlushClipboard
CoFreeUnusedLibraries
CoRevokeClassObject
OleIsCurrentClipboard

oleaut32

SysFreeString
VariantCopy
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysAllocStringByteLen
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen

Sections

.text
Size: 360KB - Virtual size: 356KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d6ab0ba063cb474a713026895debb55

Headers

File Characteristics

PDB Paths

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 360KB - Virtual size: 356KB

.rdata Size: 88KB - Virtual size: 85KB

.data Size: 16KB - Virtual size: 33KB

.rsrc Size: 3.0MB - Virtual size: 3.0MB

.text
Size: 360KB - Virtual size: 356KB

.rdata
Size: 88KB - Virtual size: 85KB

.data
Size: 16KB - Virtual size: 33KB

.rsrc
Size: 3.0MB - Virtual size: 3.0MB