jaffacakes118_Trojan[.]Win32[.]Inject[.]aismi[.]2a6a56c22e52f8d60acd6730cf83d8c2

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Inject.aismi.2a6a56c22e52f8d60acd6730cf83d8c2
Size 5.4MB
Sample261018-w7behaf15p
SHA256 8a6fa5da96d15583615ff9b3f9982b87b6990c5728fc3e111460ebf7961b43f1
MD5 2a6a56c22e52f8d60acd6730cf83d8c2
SHA1 2b4bf64e4cb37d1f420575533a4a7805b2ac6f95
SHA512 7e0301136f298423c3a84b4cb5df52c6e6d5d8917f32e621430fce9d656a379999fae7a1c6ce6b3c589a41195e6d1ad19d993bc4b0a0313b2f24421a2dd115b7
SSDEEP 49152:fKUSWXRuZcSWExhZfr8OUDSmPvMiPU3hy8ZYzHP93D9UbthMNHKQPU3hy8ZYzHPX:y6XYfhu/xw69GXUKgw6YSTnIc
TLSH
T18D46C023E251E63FC05B067D4927A6AC5E3E6A511665CC8B7AF10C8CCF75983363E24B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Inject.aismi.2a6a56c22e52f8d60acd6730cf83d8c2

File Explorer

jaffacakes118_Trojan.Win32.Inject.aismi.2a6a56c22e52f8d60acd6730cf83d8c2

.exe 5.4MB

jaffacakes118_Trojan.Win32.Inject.aismi.2a6a56c22e52f8d60acd6730cf83d8c2

IMPHASH 47f4339fd26ac459be704ff241d48d77
SHA256 8a6fa5da96d15583615ff9b3f9982b87b6990c5728fc3e111460ebf7961b43f1
MD5 2a6a56c22e52f8d60acd6730cf83d8c2
SHA1 2b4bf64e4cb37d1f420575533a4a7805b2ac6f95
SHA512 7e0301136f298423c3a84b4cb5df52c6e6d5d8917f32e621430fce9d656a379999fae7a1c6ce6b3c589a41195e6d1ad19d993bc4b0a0313b2f24421a2dd115b7
SSDEEP 49152:fKUSWXRuZcSWExhZfr8OUDSmPvMiPU3hy8ZYzHP93D9UbthMNHKQPU3hy8ZYzHPX:y6XYfhu/xw69GXUKgw6YSTnIc
TLSH
T18D46C023E251E63FC05B067D4927A6AC5E3E6A511665CC8B7AF10C8CCF75983363E24B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2588964

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

winmm

sndPlaySoundW

oleacc

LresultFromObject

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW GetDefaultPrinterW EnumPrintersW

comctl32

ImageList_GetImageInfo FlatSB_SetScrollInfo ImageList_DragMove ImageList_Destroy _TrackMouseEvent ImageList_DragShowNolock ImageList_Add FlatSB_SetScrollProp ImageList_GetDragImage ImageList_Create ImageList_EndDrag ImageList_DrawEx ImageList_SetImageCount FlatSB_GetScrollPos FlatSB_SetScrollPos InitializeFlatSB ImageList_Copy FlatSB_GetScrollInfo ImageList_Write ImageList_SetBkColor ImageList_GetBkColor ImageList_BeginDrag ImageList_GetIcon ImageList_Replace ImageList_GetImageCount ImageList_DragEnter ImageList_GetIconSize ImageList_SetIconSize ImageList_Read ImageList_DragLeave ImageList_LoadImageW ImageList_Draw ImageList_Remove ImageList_ReplaceIcon ImageList_SetOverlayImage

shell32

Shell_NotifyIconW

user32

CopyImage CreateWindowExW GetMenuItemInfoW SetMenuItemInfoW DefFrameProcW GetDCEx PeekMessageW MonitorFromWindow GetDlgCtrlID SetTimer WindowFromPoint BeginPaint DrawStateW RegisterClipboardFormatW FrameRect MapVirtualKeyW IsWindowUnicode RegisterWindowMessageW FillRect GetMenuStringW DispatchMessageW CreateAcceleratorTableW SendMessageA DefMDIChildProcW EnumWindows GetClassInfoW GetClassInfoExW ShowOwnedPopups GetSystemMenu GetScrollRange SetScrollPos GetScrollPos GetActiveWindow SetActiveWindow DrawEdge GetKeyboardLayoutList LoadBitmapW DrawFocusRect EnumChildWindows ReleaseCapture UnhookWindowsHookEx LoadCursorW GetCapture SetCapture CreatePopupMenu ScrollWindow ShowCaret GetMenuItemID GetLastActivePopup CharLowerBuffW GetSystemMetrics SetWindowLongW PostMessageW DrawMenuBar SetParent IsZoomed CharUpperBuffW GetClientRect IsChild ClientToScreen GetClipboardData SetClipboardData SetWindowPlacement IsIconic CallNextHookEx GetMonitorInfoW ShowWindow CheckMenuItem CharUpperW DefWindowProcW GetForegroundWindow SetForegroundWindow GetWindowTextW EnableWindow DestroyWindow IsDialogMessageW EndMenu RegisterClassW CharNextW GetWindowThreadProcessId RedrawWindow GetDC GetFocus SetFocus EndPaint ReleaseDC MsgWaitForMultipleObjectsEx LoadKeyboardLayoutW GetClassLongW ActivateKeyboardLayout GetParent DrawTextW SetScrollRange MonitorFromRect InsertMenuItemW PeekMessageA GetPropW SetClassLongW MessageBoxW MessageBeep SetPropW RemovePropW UpdateWindow GetSubMenu MsgWaitForMultipleObjects DestroyMenu DestroyIcon SetWindowsHookExW EmptyClipboard IsWindowVisible DispatchMessageA UnregisterClassW GetTopWindow SendMessageW AdjustWindowRectEx DrawIcon IsWindow EnumThreadWindows NotifyWinEvent InvalidateRect GetKeyboardState DrawFrameControl ScreenToClient SetCursor CreateIcon CreateMenu LoadStringW CharLowerW SetWindowRgn SetWindowPos GetMenuItemCount RemoveMenu GetSysColorBrush GetKeyboardLayoutNameW GetWindowDC TranslateMessage OpenClipboard DrawTextExW MapWindowPoints EnumDisplayMonitors CallWindowProcW CloseClipboard DestroyCursor GetScrollInfo SetWindowTextW GetMessageExtraInfo EnableScrollBar GetSysColor TrackPopupMenu CopyIcon DrawIconEx PostQuitMessage GetClassNameW ShowScrollBar EnableMenuItem GetIconInfo GetMessagePos SetScrollInfo GetKeyNameTextW GetDesktopWindow GetCursorPos SetCursorPos HideCaret GetMenu GetMenuState SetMenu SetRect GetKeyState FindWindowExW MonitorFromPoint SystemParametersInfoW LoadIconW GetCursor GetWindow GetWindowLongW GetWindowRect InsertMenuW KillTimer WaitMessage IsWindowEnabled IsDialogMessageA TranslateMDISysAccel GetWindowPlacement FindWindowW DeleteMenu GetKeyboardLayout

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

oleaut32

SafeArrayPutElement SetErrorInfo GetErrorInfo VariantInit VariantClear SysFreeString SafeArrayAccessData SysReAllocStringLen SafeArrayCreate CreateErrorInfo SafeArrayGetElement SysAllocStringLen SafeArrayUnaccessData SafeArrayPtrOfIndex VariantCopy SafeArrayGetUBound SafeArrayGetLBound VariantCopyInd VariantChangeType

advapi32

DestroyPrivateObjectSecurity GetAce OpenThreadToken RegUnLoadKeyW CreatePrivateObjectSecurityEx RegSaveKeyW EqualSid GetLengthSid RegReplaceKeyW OpenEventLogW GetSidSubAuthority GetTokenInformation MakeSelfRelativeSD RegCreateKeyExW GetSecurityDescriptorDacl ObjectPrivilegeAuditAlarmA ObjectPrivilegeAuditAlarmW GetFileSecurityW GetFileSecurityA OpenBackupEventLogW RegEnumKeyExW FindFirstFreeAce GetOldestEventLogRecord GetSecurityDescriptorGroup LookupPrivilegeValueA LookupPrivilegeValueW RegOpenKeyExW RegDeleteValueW GetCurrentHwProfileW GetCurrentHwProfileA RegFlushKey RegQueryValueExW RegEnumValueW GetKernelObjectSecurity ObjectDeleteAuditAlarmA ObjectDeleteAuditAlarmW RegRestoreKeyW RegSetValueExW RegConnectRegistryW ObjectCloseAuditAlarmA ObjectCloseAuditAlarmW LookupPrivilegeNameW GetUserNameA GetUserNameW CloseEventLog DeregisterEventSource GetSecurityDescriptorSacl DuplicateToken RegQueryInfoKeyW CreatePrivateObjectSecurity DuplicateTokenEx PrivilegeCheck GetNumberOfEventLogRecords MakeAbsoluteSD CreateProcessAsUserW CreateProcessAsUserA GetSidSubAuthorityCount RegLoadKeyW GetSecurityDescriptorLength PrivilegedServiceAuditAlarmW PrivilegedServiceAuditAlarmA ClearEventLogW ClearEventLogA CopySid GetSecurityDescriptorControl GetSidIdentifierAuthority RegDeleteKeyW ObjectOpenAuditAlarmA ObjectOpenAuditAlarmW ConvertToAutoInheritPrivateObjectSecurity OpenProcessToken GetAclInformation GetSecurityDescriptorOwner RegCloseKey

netapi32

NetWkstaGetInfo NetApiBufferFree

kernel32

GetACP LocalFree CloseHandle GetCurrentProcessId VirtualProtectEx SizeofResource VirtualProtect QueryPerformanceFrequency IsDebuggerPresent VirtualFree GetThreadContext GetFullPathNameW ExitProcess HeapAlloc GetCPInfoExW RtlUnwind GetCPInfo EnumSystemLocalesW GetStdHandle GetTimeZoneInformation GetModuleHandleW FreeLibrary TryEnterCriticalSection HeapDestroy ReadFile HeapSize GetLastError GetModuleFileNameW SetLastError GlobalAlloc GlobalUnlock FindResourceW CreateThread CompareStringW LoadLibraryA ResetEvent MulDiv FreeResource GetVersion RaiseException GlobalAddAtomW FormatMessageW SwitchToThread GetExitCodeThread GetCurrentThread LoadLibraryExW TerminateProcess LockResource GetCurrentThreadId UnhandledExceptionFilter VirtualQuery GlobalFindAtomW VirtualQueryEx GlobalFree Sleep EnterCriticalSection SetFilePointer LoadResource SuspendThread GetTickCount GetStartupInfoW GlobalDeleteAtom GetFileAttributesW InitializeCriticalSection GetThreadPriority GetCurrentProcess SetThreadPriority GlobalLock VirtualAlloc GetSystemInfo GetCommandLineW LeaveCriticalSection GetProcAddress ResumeThread GetVersionExW VerifyVersionInfoW HeapCreate GetDiskFreeSpaceW VerSetConditionMask FindFirstFileW GetUserDefaultUILanguage lstrlenW QueryPerformanceCounter SetEndOfFile HeapFree WideCharToMultiByte FindClose MultiByteToWideChar LoadLibraryW SetEvent CreateFileW GetLocaleInfoW EnumResourceNamesW DeleteFileW GetLocalTime WaitForSingleObject WriteFile ExitThread DeleteCriticalSection GetDateFormatW TlsGetValue SetErrorMode IsValidLocale SleepEx TlsSetValue GetSystemDefaultUILanguage EnumCalendarInfoW LocalAlloc RemoveDirectoryW CreateEventW WaitForMultipleObjectsEx SetThreadLocale GetThreadLocale

ole32

IsEqualGUID OleInitialize OleUninitialize CoInitialize CoCreateInstance CoUninitialize CoTaskMemFree CoTaskMemAlloc

gdi32

Pie SetBkMode CreateCompatibleBitmap GetEnhMetaFileHeader RectVisible AngleArc SetAbortProc SetTextColor StretchBlt RoundRect RestoreDC SetRectRgn GetTextMetricsW GetWindowOrgEx CreatePalette PolyBezierTo CreateICW CreateDCW GetStockObject CreateSolidBrush Polygon MoveToEx PlayEnhMetaFile Ellipse StartPage GetBitmapBits StartDocW AbortDoc GetSystemPaletteEntries GetEnhMetaFileBits GetEnhMetaFilePaletteEntries CreatePenIndirect CreateFontIndirectW PolyBezier EndDoc GetObjectW GetWinMetaFileBits SetROP2 GetEnhMetaFileDescriptionW ArcTo Arc SelectPalette ExcludeClipRect MaskBlt SetWindowOrgEx EndPage DeleteEnhMetaFile Chord SetDIBits SetViewportOrgEx CreateRectRgn RealizePalette SetDIBColorTable GetDIBColorTable CreateBrushIndirect PatBlt SetEnhMetaFileBits Rectangle SaveDC DeleteDC FrameRgn BitBlt GetDeviceCaps GetTextExtentPoint32W GetClipBox IntersectClipRect Polyline CreateBitmap SetWinMetaFileBits GetStretchBltMode CreateDIBitmap SetStretchBltMode GetDIBits CreateDIBSection LineTo GetRgnBox EnumFontsW CreateHalftonePalette SelectObject DeleteObject ExtFloodFill UnrealizeObject CopyEnhMetaFileW SetBkColor CreateCompatibleDC GetBrushOrgEx GetCurrentPositionEx SetDCPenColor GetTextExtentPointW ExtTextOutW SetBrushOrgEx GetPixel GdiFlush SetPixel EnumFontFamiliesExW StretchDIBits GetPaletteEntries

Name

.text

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

26KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

154B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

88B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

93B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

235KB

Virtual Size

234KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2.6MB

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_Trojan.Win32.Inject.aismi.2a6a56c22e52f8d60acd6730cf83d8c2

winmm

oleacc

winspool.drv

comctl32

shell32

user32

version

oleaut32

advapi32

netapi32

kernel32

ole32

gdi32

generic