deb957c4bbe6272c7a1ceeb34c15a0d2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

deb957c4bbe6272c7a1ceeb34c15a0d2_JaffaCakes118
Size

189KB
MD5

deb957c4bbe6272c7a1ceeb34c15a0d2
SHA1

9e532261e5e33f6e3e1819e70c3b53d550cbdefe
SHA256

90d815573feab0004a23843eb7423d06e7b2e60d131b9d488aa91279168f35de
SHA512

c9b01fbd2bbbdc73a05be8059c7bafecff64196b009f0b6bbf49f43fcc22e063e405adc59e5407e5ebb48deaef2b5e005850d8ea8c6dc586382c203c9c81a8a2
SSDEEP

3072:eb1ra49nXZGwUMMnMMMMMX7I7D8MVVMpTndO0aYz/Rdosju60Z6ts/iixX3y5BRj:u3jGnMMnMMMMMamRdor6G8s/Rny5B6m7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
deb957c4bbe6272c7a1ceeb34c15a0d2_JaffaCakes118

Files

deb957c4bbe6272c7a1ceeb34c15a0d2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

037140cf553c9323b711ed21771613d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetFileTitleA

samlib

SamiEncryptPasswords
SamRemoveMultipleMembersFromAlias
SamConnectWithCreds
SamTestPrivateFunctionsUser

kernel32

GetVersionExA
GetLocalTime
GetFileAttributesA
WideCharToMultiByte
MultiByteToWideChar
GetProcessVersion
TerminateProcess
GlobalGetAtomNameA
SetUnhandledExceptionFilter
GlobalHandle
GlobalUnlock
GetWindowsDirectoryA
GetLastError
DeleteCriticalSection
IsBadWritePtr
GlobalAddAtomA
RaiseException
GetStringTypeExA
EnterCriticalSection
GlobalFree
WriteFile
GetCPInfo
GetStringTypeA
GetEnvironmentStringsW
CreateEventA
SuspendThread
IsValidCodePage
HeapSize
lstrcpyA
GlobalAlloc
GetUserDefaultLCID
GetFileType
LCMapStringA
lstrcpynA
lstrcatA
lstrlenA
FreeEnvironmentStringsW
ExitThread
GlobalFlags
HeapCreate
FindClose
GetACP
GetVolumeInformationA
GetPrivateProfileIntA
GetThreadLocale
FreeLibrary
GetOEMCP
GetStringTypeW
GetShortPathNameA
FileTimeToLocalFileTime
SetErrorMode
HeapReAlloc
GetLocaleInfoW
SetFileTime
RtlUnwind
GetCurrentThread
TlsAlloc
GetCurrentProcess
FileTimeToSystemTime
HeapFree
GetEnvironmentVariableA
GetCurrentDirectoryA
SetFileAttributesA
FreeEnvironmentStringsA
CloseHandle
GetSystemTime
TlsGetValue
HeapAlloc
TlsFree
MulDiv
GetPrivateProfileStringA
GetModuleFileNameA
DeleteFileA
UnhandledExceptionFilter
DuplicateHandle
SetLastError
GetCommandLineA
LocalAlloc
FatalAppExitA
lstrcmpiA
GlobalLock
LoadLibraryA
SetFilePointer
LoadResource
LockFile
GetTimeZoneInformation
LCMapStringW
IsValidLocale
FlushFileBuffers
MoveFileA
SystemTimeToFileTime
HeapDestroy
GetCurrentThreadId
GetFileTime
CreateFileA
CompareStringW
CompareStringA
IsBadReadPtr
LocalFree
VirtualFree
InterlockedDecrement
EnumSystemLocalesA
InitializeCriticalSection
LocalReAlloc
GetStartupInfoA
CreateThread
IsBadCodePtr
WaitForSingleObject
GetStdHandle
SetConsoleCtrlHandler
FindResourceA
SetEvent
TlsSetValue
ExitProcess
GetProcAddress
Sleep
GetFullPathNameA
LeaveCriticalSection
SetHandleCount
lstrcmpA
GetVersion
WritePrivateProfileStringA
GlobalFindAtomA
SetEndOfFile
InterlockedIncrement
ReadFile
ResumeThread
UnlockFile
GlobalDeleteAtom
GetLocaleInfoA
LockResource
VirtualAlloc
SetThreadPriority
GetModuleHandleA
GlobalReAlloc
SetEnvironmentVariableA
FindFirstFileA
GetFileSize
LocalFileTimeToFileTime
GetEnvironmentStrings

shell32

SHGetFileInfoA
DragAcceptFiles

msi

MsiCollectUserInfoW
MsiConfigureFeatureW
MsiDatabaseCommit

advapi32

LookupPrivilegeValueA
RegOpenKeyA
RegOpenKeyExA
AdjustTokenPrivileges
OpenProcessToken
RegDeleteKeyA
RegSetValueExA
RegEnumValueA
RegRestoreKeyA
RegCloseKey
RegQueryInfoKeyA
RegCreateKeyExA
RegQueryValueExA
RegDeleteValueA

setupapi

SetupDiEnumDeviceInfo
SetupDiBuildDriverInfoList
SetupGetStringFieldA
SetupDiOpenDevRegKey
SetupFindFirstLineA
SetupFindNextLine
SetupDiCreateDeviceInfoA
SetupOpenInfFileA
SetupDiSetDeviceRegistryPropertyA
SetupDiGetDeviceInstallParamsA
SetupCloseInfFile
SetupDiClassGuidsFromNameA
SetupDiSetDeviceInstallParamsA
SetupDiSetSelectedDriverA
SetupDiEnumDriverInfoA

user32

PostQuitMessage
CallNextHookEx
GetSubMenu
RegisterClassA
DrawTextA
DeferWindowPos
CharUpperA
SetWindowPlacement
BeginPaint
GetClassLongA
SetScrollRange
GetMessageTime
GetWindowTextLengthA
EqualRect
CreateWindowExA
SetMenuItemBitmaps
GetClientRect
GetScrollRange
CopyRect
EndDeferWindowPos
DefWindowProcA
CharToOemA
GetDesktopWindow
GetPropA
MapWindowPoints
GetWindow
SetWindowPos
CheckRadioButton
IsDialogMessageA
DeleteMenu
ScreenToClient
GetWindowPlacement
PtInRect
SetWindowsHookExA
GetMenu
RemovePropA
IsWindow
GetClassInfoA
SetPropA
GetMenuState
GetKeyState
GetClassNameA
CheckDlgButton
LoadStringA
GetDC
ShowOwnedPopups
LoadCursorA
GetCursorPos
GetLastActivePopup
ScrollWindow
IsWindowVisible
LoadIconA
CallWindowProcA
GetWindowLongA
EnableMenuItem
IsChild
ModifyMenuA
SystemParametersInfoA
SendMessageA
ClientToScreen
GetTopWindow
GetMenuItemID
SetCursor
MessageBoxA
DispatchMessageA
TranslateMessage
ReleaseDC
IntersectRect
PostMessageA
GetWindowRect
GetScrollInfo
GetScrollPos
RegisterWindowMessageA
IsDlgButtonChecked
ShowScrollBar
GetMenuItemCount
MoveWindow
SetActiveWindow
GetSystemMetrics
EnableWindow
SetDlgItemInt
IsWindowEnabled
BeginDeferWindowPos
GetMessagePos
GetFocus
GetParent
GetSysColorBrush
GetDlgCtrlID
ShowWindow
SetFocus
TabbedTextOutA
PeekMessageA
SetForegroundWindow
GetMenuStringA
SetScrollPos
GetActiveWindow
GetWindowTextA
SetScrollInfo
InsertMenuA
AdjustWindowRectEx
GetCapture
GetSysColor
GetWindowDC
OffsetRect
SendDlgItemMessageA
IsIconic
UpdateWindow
GetNextDlgTabItem
ValidateRect
DestroyMenu
GetMenuCheckMarkDimensions
WinHelpA
GetDlgItem
GetMessageA
GrayStringA
OemToCharA
UnhookWindowsHookEx
SetWindowTextA
SetWindowLongA
TrackPopupMenu
ScrollWindowEx
GetDlgItemTextA
CallMsgFilterA
EndPaint
GetForegroundWindow
GetDlgItemInt
wsprintfA
DestroyWindow
CheckMenuItem
LoadBitmapA

gdi32

SetWindowOrgEx
ExtTextOutA
GetClipBox
RestoreDC
SetWindowExtEx
ExtSelectClipRgn
ArcTo
GetStockObject
OffsetClipRgn
PtVisible
GetWindowExtEx
SaveDC
SetBkColor
CreateSolidBrush
CreateDIBPatternBrushPt
ScaleViewportExtEx
GetCurrentPositionEx
SetColorAdjustment
ExtCreatePen
GetViewportExtEx
CreateBitmap
CreateRectRgn
SetArcDirection
MoveToEx
ScaleWindowExtEx
StartDocA
SelectClipPath
SetViewportExtEx
TextOutA
OffsetViewportOrgEx
GetObjectA
SetBkMode
PlayMetaFile
SetViewportOrgEx
DeleteObject
SetTextColor
SelectClipRgn
GetDCOrgEx
ExcludeClipRect
SetTextCharacterExtra
SelectObject
PlayMetaFileRecord
GetClipRgn
OffsetWindowOrgEx
CreatePen
PolylineTo
IntersectClipRect
PolyDraw
SetStretchBltMode
DeleteDC
EnumMetaFile
SelectPalette
GetDeviceCaps
Escape
SetTextAlign
PolyBezierTo
SetTextJustification
GetObjectType
RectVisible
SetROP2
SetMapMode
CreateHatchBrush
LineTo
CreatePatternBrush
SetPolyFillMode
SetMapperFlags

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

037140cf553c9323b711ed21771613d3

Headers

DLL Characteristics

File Characteristics

Imports

comdlg32

samlib

kernel32

shell32

msi

advapi32

setupapi

user32

gdi32

Sections

.text Size: 1KB - Virtual size: 1KB

.data Size: 5KB - Virtual size: 384KB

.idata Size: 10KB - Virtual size: 9KB

.rsrc Size: 149KB - Virtual size: 148KB

.rdata Size: 22KB - Virtual size: 21KB

.reloc Size: 512B - Virtual size: 64B

.text
Size: 1KB - Virtual size: 1KB

.data
Size: 5KB - Virtual size: 384KB

.idata
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 149KB - Virtual size: 148KB

.rdata
Size: 22KB - Virtual size: 21KB

.reloc
Size: 512B - Virtual size: 64B