e9481313fc58c63b79dc9e84c3ef4136_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e9481313fc58c63b79dc9e84c3ef4136_JaffaCakes118
Size

21KB
MD5

e9481313fc58c63b79dc9e84c3ef4136
SHA1

0860d70387c51673a4cbab6e0bac78ca244c9d62
SHA256

7a488eb91939ee0b28d6847b8690fa1b14ebcfe7273130f5be82eaf412934ffc
SHA512

4b27afc701aa8cf52506f6132e64474feecf330388d0e455740fe33c9737b6d0e648862d6e4dc8588be78f1a4f9f305d451c7b3b8d61998c6203508a28547139
SSDEEP

384:BXBlFMoPJlje/NX8BoXBbWBUpnGmIuWHP+hh4WWieZW8s3:ZBlFDPJla/l8BiBbWBQGuWHP+hhdem

Score

1^/10

Malware Config

Signatures

Files

e9481313fc58c63b79dc9e84c3ef4136_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2590fdee71ed97a6bc2d1d8360a2d567

Code Sign

60:29:be:36:38:c4:8a:74:bb:5e:b2:8f:90:0a:7f:8c
Certificate

Issuer

CN=yFfJFQjZS5cVSsx

Not Before

20/03/2012, 06:07

Not After

31/12/2039, 23:59

Subject

CN=yFfJFQjZS5cVSsx

Extended Key Usages

ExtKeyUsageCodeSigning

d2:06:59:1a:4c:f7:ea:4f:d7:4e:47:c9:70:05:a4:45:cc:63:1f:0f
Signer

Actual PE Digest

d2:06:59:1a:4c:f7:ea:4f:d7:4e:47:c9:70:05:a4:45:cc:63:1f:0f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTempPathA

msvcrt

memset

user32

UnregisterHotKey
UnregisterClassA
TrackMouseEvent
ToAsciiEx
TabbedTextOutW
SystemParametersInfoA
ShowOwnedPopups
SetWindowTextA
SetWindowLongW
SetWinEventHook
SetUserObjectInformationA
SetMessageQueue
SetMessageExtraInfo
SetMenuItemBitmaps
SetKeyboardState
SetFocus
SetDoubleClickTime
SetClassLongA
SendMessageA
SendIMEMessageExW
SendDlgItemMessageW
ReplyMessage
ReleaseDC
RegisterWindowMessageA
PostQuitMessage
OpenDesktopA
OpenClipboard
OemToCharW
OemKeyScan
MsgWaitForMultipleObjects
MessageBoxExW
LoadStringA
LoadMenuIndirectA
LoadAcceleratorsW
IsCharAlphaNumericW
InvertRect
IntersectRect
InternalGetWindowText
InsertMenuItemW
InSendMessage
GrayStringA
GetWindowThreadProcessId
GetWindowInfo
GetWindowContextHelpId
GetWindow
GetUpdateRgn
GetQueueStatus
GetMonitorInfoA
GetMenuItemRect
GetMenu
GetLastInputInfo
GetKeyboardLayoutNameA
GetInputDesktop
GetGuiResources
GetForegroundWindow
GetDesktopWindow
GetComboBoxInfo
GetCaretBlinkTime
GetAsyncKeyState
GetAncestor
GetActiveWindow
FlashWindowEx
FindWindowExA
FindWindowA
ExcludeUpdateRgn
EnumWindowStationsW
EmptyClipboard
DrawStateA
DrawFocusRect
DrawEdge
DispatchMessageA
DialogBoxParamW
DeregisterShellHookWindow
DefWindowProcW
DefMDIChildProcW
DefMDIChildProcA
DdeSetUserHandle
DdeQueryConvInfo
DdePostAdvise
DdeEnableCallback
DdeCreateStringHandleW
DdeConnectList
DdeClientTransaction
CreateDialogIndirectParamW
CreateCaret
CharUpperBuffA
CascadeChildWindows
BroadcastSystemMessageW
BringWindowToTop
AdjustWindowRectEx
UnregisterClassW

gdi32

CombineTransform
CloseEnhMetaFile
Arc
XLATEOBJ_iXlate
UpdateColors
UnloadNetworkFonts
SetWindowExtEx
SetTextCharacterExtra
SetMagicColors
SetICMProfileW
SetColorAdjustment
SetBitmapDimensionEx
SetBitmapBits
SelectObject
SelectFontLocal
SaveDC
STROBJ_vEnumStart
STROBJ_bGetAdvanceWidths
RoundRect
ResetDCW
RemoveFontResourceTracking
PlgBlt
PATHOBJ_vEnumStart
OffsetRgn
NamedEscape
InvertRgn
HT_Get8BPPFormatPalette
GetTextExtentPointA
GetTextColor
GetTextAlign
GetRelAbs
GetRegionData
GetPixelFormat
GetObjectType
GetMetaFileBitsEx
GetKerningPairsA
GetGlyphOutlineW
GetGlyphOutline
GetDeviceGammaRamp
GetCurrentObject
GetCharacterPlacementA
GetCharWidthA
GetCharABCWidthsI
GetCharABCWidthsFloatA
GetBitmapBits
GdiSwapBuffers
GdiSetLastError
GdiSetAttrs
GdiPlayScript
GdiPlayPrivatePageEMF
GdiGetDevmodeForPage
GdiFixUpHandle
GdiEntry8
GdiConvertRegion
GdiConvertFont
GdiConvertBitmap
GdiConvertAndCheckDC
GdiAddGlsBounds
FillRgn
FONTOBJ_vGetInfo
ExtTextOutA
ExtFloodFill
ExtCreatePen
EnumFontsA
EnumFontFamiliesW
EnumFontFamiliesExA
EnumEnhMetaFile
EngWideCharToMultiByte
EngUnlockSurface
EngUnicodeToMultiByteN
EngQueryEMFInfo
EngFreeModule
EngCreateSemaphore
EnableEUDC
Ellipse
DeviceCapabilitiesExW
DeviceCapabilitiesExA
DeleteEnhMetaFile
DeleteDC
DeleteColorSpace
CreatePolygonRgn
CreatePolyPolygonRgn
CreatePenIndirect
CreateFontW
CreateEnhMetaFileW
CreateEllipticRgnIndirect
CreateDIBitmap
CreateColorSpaceW
CopyEnhMetaFileW
AddFontResourceExA

advapi32

RegOpenKeyExW

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2590fdee71ed97a6bc2d1d8360a2d567

Code Sign

60:29:be:36:38:c4:8a:74:bb:5e:b2:8f:90:0a:7f:8cCertificate

Extended Key Usages

d2:06:59:1a:4c:f7:ea:4f:d7:4e:47:c9:70:05:a4:45:cc:63:1f:0fSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

advapi32

Sections

.text Size: 14KB - Virtual size: 13KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 3KB - Virtual size: 2KB

60:29:be:36:38:c4:8a:74:bb:5e:b2:8f:90:0a:7f:8c
Certificate

d2:06:59:1a:4c:f7:ea:4f:d7:4e:47:c9:70:05:a4:45:cc:63:1f:0f
Signer

.text
Size: 14KB - Virtual size: 13KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 3KB - Virtual size: 2KB