a4dc7fe458431f1d890947e87e473c4d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a4dc7fe458431f1d890947e87e473c4d_JaffaCakes118
Size

434KB
MD5

a4dc7fe458431f1d890947e87e473c4d
SHA1

478e4057787f4d01a9844038637d59ae3ac3f5a5
SHA256

ea8e65bff29dad6e51ff711889010c7367146218fd219e6be01741a5d9422fc2
SHA512

d658b2f5767266e8691d510376b79d1960c6ec00a81e814daa16b586534d2693d108b584af21db4d1b2fc40b796ff215a89f9e934e7cd227abb9e8c114ad8c58
SSDEEP

12288:bxBUTcF/OSEAG6unC278H5x9jV9ia+qR:bxBUT4laxOx9iaBR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4dc7fe458431f1d890947e87e473c4d_JaffaCakes118

Files

a4dc7fe458431f1d890947e87e473c4d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e979ffb3a241c842528607cbab8bf588

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

samlib

SamConnectWithCreds
SamConnect
SamLookupNamesInDomain

ddraw

DirectDrawEnumerateA

ws2_32

setsockopt
WSAConnect

ole32

OleLoad
OleSave

kernel32

VirtualAlloc
IsBadReadPtr
ReleaseSemaphore
GetStartupInfoA
TlsAlloc
SetLocalTime
FindResourceA
ExitThread
GetCurrentDirectoryA
GlobalFree
SetEvent
GetTempFileNameA
HeapSize
ResetEvent
GetTickCount
CompareStringA
DeleteFileA
InterlockedDecrement
GetDateFormatA
GlobalAddAtomA
GetSystemDefaultLCID
GlobalLock
GlobalSize
LoadResource
GetFileTime
GetEnvironmentStrings
GetUserDefaultLCID
CreateThread
GetModuleHandleA
GetTimeZoneInformation
VirtualFree
_llseek
SetStdHandle
CreateProcessW
HeapCreate
lstrcpyA
GetSystemDefaultLangID
GetExitCodeProcess
GetACP
HeapFree
_lclose
SetEndOfFile
CreateDirectoryA
VirtualProtect
UnhandledExceptionFilter
GlobalDeleteAtom
GetStringTypeA
GetCPInfo
SetFileAttributesA
CompareStringW
GetOEMCP
_lread
GetProfileStringA
GetLastError
ReadFile
GetShortPathNameA
GetSystemTime
FindFirstFileA
GetWindowsDirectoryA
GetCurrentProcessId
FormatMessageA
TlsFree
DeleteCriticalSection
RtlUnwind
SetErrorMode
FreeEnvironmentStringsW
HeapDestroy
GetVersionExA
HeapReAlloc
SizeofResource
GetVersion
VirtualQuery
lstrcmpiA
InitializeCriticalSection
TlsSetValue
GlobalAlloc
UnlockFile
IsBadCodePtr
GetTempPathA
GetFileAttributesA
GetCurrentThreadId
LCMapStringW
GetDriveTypeA
GetSystemInfo
MulDiv
lstrcmpiW
LoadLibraryA
TlsGetValue
_lwrite
TerminateProcess
GetFileType
CreateFileA
GetStringTypeExA
WinExec
GetStringTypeW
GetStdHandle
FreeResource
InterlockedIncrement
CreateProcessA
MultiByteToWideChar
GetUserDefaultLangID
LoadLibraryExA
GetLocaleInfoA
SetCurrentDirectoryA
LeaveCriticalSection
GlobalHandle
GlobalUnlock
ExitProcess
GetModuleFileNameA
SearchPathA
FreeEnvironmentStringsA
GetEnvironmentStringsW
GlobalReAlloc
lstrcmpA
WideCharToMultiByte
ResumeThread
FlushFileBuffers
lstrlenA
GetSystemDirectoryA
FileTimeToSystemTime
MoveFileA
SetFilePointer
CreateSemaphoreA
RemoveDirectoryA
SetFileTime
SetEnvironmentVariableA
WriteFile
LockFile
WaitForSingleObject
GetCommandLineA
GetFullPathNameA
GetCurrentProcess
Sleep
FormatMessageW
GetVolumeInformationA
GetModuleFileNameW
SystemTimeToFileTime
CloseHandle
CreateEventA
RaiseException
FindClose
FlushInstructionCache
DuplicateHandle
LCMapStringA
FindNextFileA
GetLocalTime
FreeLibrary
LockResource
FileTimeToLocalFileTime
SetHandleCount
IsDBCSLeadByte
lstrcpynA
EnterCriticalSection
GetProcAddress
HeapAlloc
SetLastError
lstrcatA

user32

DestroyCaret
GetSystemMetrics
CharUpperBuffA
CallWindowProcA
CharUpperA
GetCapture
GetWindowTextLengthA
SetActiveWindow
VkKeyScanW
GetActiveWindow
UpdateWindow
GetLastActivePopup
PtInRect
PostQuitMessage
GetWindowThreadProcessId
GetClipboardData
DdeGetData
SetCursor
ReleaseCapture
GetWindowDC
RemoveMenu
RegisterClassA
DrawTextA
CallNextHookEx
CreateCursor
MsgWaitForMultipleObjects
GetScrollInfo
GetClientRect
LoadCursorA
GetCaretBlinkTime
AdjustWindowRectEx
CheckMenuItem
DdeUninitialize
CharNextA
GetWindowTextA
LoadImageA
LockWindowUpdate
ShowCursor
CopyAcceleratorTableA
CharLowerBuffA
GetMessageTime
TrackPopupMenu
GetClassInfoA
SetDlgItemTextA
FrameRect
MapWindowPoints
GetCursor
IsWindow
DdePostAdvise
GetSubMenu
SubtractRect
DeferWindowPos
LoadStringA
IsClipboardFormatAvailable
SetMenuDefaultItem
SetCursorPos
DdeClientTransaction
MoveWindow
ReleaseDC
DefMDIChildProcA
GetMenuStringA
ScreenToClient
DestroyCursor
WindowFromPoint
GetMessagePos
BringWindowToTop
DdeInitializeA
GetDoubleClickTime
GetAsyncKeyState
GetFocus
ShowCaret
GetTabbedTextExtentA
MessageBoxIndirectA
DefFrameProcA
IsCharAlphaA
DdeCreateDataHandle
DdeDisconnect
CharLowerBuffW
CharToOemBuffA
SendDlgItemMessageA
EndDialog
GetMenuItemInfoA
EnableWindow
IsWindowVisible
FindWindowA
DestroyIcon
DdeQueryStringA
EmptyClipboard
ToAscii
DrawMenuBar
TranslateMessage
IsIconic
KillTimer
BeginDeferWindowPos
WaitForInputIdle
RegisterClipboardFormatA
CreateIcon
SetParent
GetClassInfoExA
CreatePopupMenu
SetScrollRange
GetSystemMenu
PeekMessageW
GetCaretPos
DdeGetLastError
SetPropA
InvalidateRgn
WinHelpA
CloseClipboard
GetIconInfo
IsZoomed
EnumClipboardFormats
GetKeyboardState
GetWindowRect
CharLowerA
GetDlgItem
SetRect
EnumThreadWindows
IsChild
PostMessageA
SetCaretPos
FillRect
GetClipboardFormatNameA
PeekMessageA
EndDeferWindowPos
DdeQueryConvInfo
CharPrevA
IsDialogMessageA
SetTimer
ShowScrollBar
CharUpperBuffW
DdeCreateStringHandleA
GetMenu
DrawIcon
CreateWindowExA
SetWindowLongA
EnableMenuItem
AttachThreadInput
ShowWindow
UnhookWindowsHookEx
GetClassNameA
InflateRect
ClipCursor
SetWindowsHookExW
AppendMenuA
DefWindowProcA
InvalidateRect
LoadBitmapA
OffsetRect
SetForegroundWindow
GetUpdateRgn
GetWindow
DrawFocusRect
CreateDialogParamA
VkKeyScanA
SetWindowContextHelpId
SetClipboardData
DdeCmpStringHandles
OemToCharA
GetMenuState
HideCaret
DestroyMenu
CreateAcceleratorTableA
CopyRect
DestroyAcceleratorTable
SetKeyboardState
DialogBoxParamA
DeleteMenu
GetScrollPos
GetKeyState
SetFocus
GetUpdateRect
IntersectRect
OpenClipboard
CreateMenu
MessageBeep
GetCursorPos
SystemParametersInfoA
LoadIconA
SendMessageA
SetCapture
GetParent
WaitMessage
TranslateMDISysAccel
SetMenuItemInfoA
EqualRect
GetMenuItemID
InsertMenuA
IsRectEmpty
RegisterClassExA
DdeFreeStringHandle
DdeFreeDataHandle
SetMenu
DrawFrameControl
CharToOemA
PostThreadMessageA
DdeConnect
DispatchMessageA
ModifyMenuA
GetDC
GetSysColor
GetQueueStatus
GetForegroundWindow
DdeSetUserHandle
SetWindowRgn
GetWindowLongA
FindWindowW
GetDCEx
GetPropA
SetScrollInfo
GetMenuItemCount
DdeNameService
EndPaint
DdeAbandonTransaction
LoadAcceleratorsA
IsWindowEnabled
BeginPaint
CreateCaret
TabbedTextOutA
SetWindowsHookExA
ClientToScreen
DestroyWindow
SetWindowPos
SetWindowTextA
GetKeyboardLayout
MessageBoxA
PostMessageW
AdjustWindowRect
GetWindowRgn
wsprintfA
RemovePropA
SetScrollPos
UnregisterClassA
GetDesktopWindow
keybd_event

advapi32

RegQueryValueExW
AdjustTokenPrivileges
RegSetValueExA
RegCreateKeyA
RegEnumKeyW
RegSetValueExW
RegCloseKey
OpenProcessToken
RegDeleteValueW
InitializeSecurityDescriptor
RegCreateKeyW
RegQueryValueA
DeregisterEventSource
RegDeleteKeyA
RegEnumValueA
RegSetValueA
SetSecurityDescriptorDacl
RegQueryInfoKeyA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegOpenKeyW
RegDeleteValueA
RegDeleteKeyW
RegEnumValueW
RegisterEventSourceA
LookupPrivilegeValueA
ReportEventA
RegEnumKeyA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 133KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e979ffb3a241c842528607cbab8bf588

Headers

File Characteristics

Imports

samlib

ddraw

ws2_32

ole32

kernel32

user32

advapi32

Sections

.text Size: 1KB - Virtual size: 1KB

.idata Size: 11KB - Virtual size: 10KB

.data Size: 133KB - Virtual size: 1.6MB

.rsrc Size: 109KB - Virtual size: 109KB

.rdata Size: 177KB - Virtual size: 177KB

.text
Size: 1KB - Virtual size: 1KB

.idata
Size: 11KB - Virtual size: 10KB

.data
Size: 133KB - Virtual size: 1.6MB

.rsrc
Size: 109KB - Virtual size: 109KB

.rdata
Size: 177KB - Virtual size: 177KB