3f47a2d30640f6afeeb664caf2b9d7ba_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3f47a2d30640f6afeeb664caf2b9d7ba_JaffaCakes118
Size

593KB
MD5

3f47a2d30640f6afeeb664caf2b9d7ba
SHA1

77659112b4b093aa76bcdec7c42fbb966e719dbb
SHA256

04f9212b3243ce68cba4d418fa915af7c25d80a57763ef4b16a1b2dc34269e66
SHA512

0c252e5a02fe15dfe59a71c3a4ce29091763cb7d6299353a8f0e4b875fff175dacb47985eeccaebd3d8144fee470dd6fd0233a9e466f94436ba70bbf58d8ce01
SSDEEP

6144:OPzEupMvSVQ45CrGhKcWBQM+T+jYc45dNju8SZn243e20e7BnBXrDCAc8Dya1+WS:fVKSyhdAQMGIqdpzQn2ElNl7cXqfrX3G

Score

1^/10

Malware Config

Signatures

Files

3f47a2d30640f6afeeb664caf2b9d7ba_JaffaCakes118
.exe windows:5 windows x86 arch:x86

39a4de3b45e7798f503b6dc37a6cd947

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c9:be:03:b7:59:b3:c9:58:ed:3b:bf:b0:01:50:63:09
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2016, 00:00

Not After

25/05/2017, 23:59

Subject

CN=Inergen,O=Inergen,POSTALCODE=109117,STREET=AVENUE VOLGOGRAD\, House 93\, Building 2\, ROOM II ROOM 12\,,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

bc:a6:b7:f7:10:4b:a4:1a:50:05:65:34:c2:a0:62:d1:11:e3:c1:65
Signer

Actual PE Digest

bc:a6:b7:f7:10:4b:a4:1a:50:05:65:34:c2:a0:62:d1:11:e3:c1:65

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlZeroMemory
SearchPathW
SetComputerNameW
SetConsoleMode
SetConsoleOutputCP
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetProcessAffinityMask
SetStdHandle
SetThreadExecutionState
SetThreadPriority
SetUnhandledExceptionFilter
SetVolumeMountPointA
SizeofResource
Sleep
SleepEx
SystemTimeToFileTime
TerminateJobObject
TerminateProcess
Thread32First
RtlUnwind
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
Toolhelp32ReadProcessMemory
TryEnterCriticalSection
UnhandledExceptionFilter
UnlockFile
VerLanguageNameW
VerSetConditionMask
VerifyVersionInfoW
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileStringW
lstrcmpA
lstrcmpW
lstrcmpiW
lstrcpyW
lstrlenA
lstrlenW
ResumeThread
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReleaseActCtx
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringW
OpenWaitableTimerW
OpenThread
OpenProcess
MultiByteToWideChar
MulDiv
MoveFileW
MoveFileExW
LockResource
LockFile
LocalReAlloc
LocalFree
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryExW
LoadLibraryA
LeaveCriticalSection
LCMapStringW
IsValidCodePage
IsProcessorFeaturePresent
IsDebuggerPresent
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
HeapSize
HeapSetInformation
HeapReAlloc
HeapQueryInformation
HeapFree
HeapCreate
HeapAlloc
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalMemoryStatusEx
GlobalLock
GlobalHandle
GlobalGetAtomNameW
GlobalFree
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetWindowsDirectoryW
GetVolumeInformationW
GetVersionExW
GetUserDefaultUILanguage
GetTimeZoneInformation
GetTimeFormatW
GetTickCount
GetThreadTimes
GetThreadLocale
GetTempPathW
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDirectoryW
GetSystemDefaultUILanguage
GetSystemDefaultLangID
GetStringTypeW
GetStdHandle
GetStartupInfoW
GetShortPathNameW
GetProfileIntW
GetProcessPriorityBoost
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileIntW
GetOEMCP
GetNumberFormatW
GetModuleHandleA
GetModuleFileNameW
GetLogicalDrives
GetLogicalDriveStringsW
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileType
GetFileTime
GetFileSizeEx
GetFileSize
GetFileAttributesW
GetFileAttributesExW
GetEnvironmentStringsW
GetDriveTypeW
GetDriveTypeA
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetConsoleMode
GetConsoleCP
GetCompressedFileSizeW
GetCommandLineW
GetCPInfo
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FormatMessageW
FlushFileBuffers
FindResourceW
FindResourceExW
FindResourceExA
FindNextFileW
FindFirstFileW
FindFirstFileExW
FindClose
FileTimeToSystemTime
VirtualAlloc
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesW
EnumDateFormatsExA
EnterCriticalSection
EncodePointer
DuplicateHandle
DeviceIoControl
DeleteVolumeMountPointA
DeleteFileW
DeleteCriticalSection
DecodePointer
DebugBreak
DeactivateActCtx
CreateToolhelp32Snapshot
CreateThread
CreateMutexW
CreateJobObjectW
CreateFileW
CreateEventW
CreateDirectoryW
CreateActCtxW
CopyFileW
CopyFileExW
ConvertDefaultLocale
CompareStringW
CloseHandle
ActivateActCtx
GetModuleHandleW
Thread32Next

user32

SetCursorPos
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetMenu
SetMenuDefaultItem
SetMenuItemBitmaps
SetParent
SetPropW
SetRect
SetRectEmpty
SetScrollInfo
SetScrollPos
SetScrollRange
SetSystemCursor
SetTimer
SetWindowContextHelpId
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowOwnedPopups
ShowScrollBar
ShowWindow
SubtractRect
SystemParametersInfoW
TabbedTextOutW
ToUnicodeEx
TrackPopupMenu
TranslateAcceleratorW
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnpackDDElParam
UnregisterClassW
UpdateLayeredWindow
UpdateWindow
ValidateRect
WaitMessage
WinHelpW
WindowFromPoint
wsprintfW
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
MapVirtualKeyExW
MapDialogRect
LockWindowUpdate
LoadMenuW
LoadImageW
LoadIconW
LoadCursorW
LoadBitmapW
LoadAcceleratorsW
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsMenu
IsIconic
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
IsCharLowerW
InvertRect
InvalidateRgn
InvalidateRect
IntersectRect
InsertMenuW
InsertMenuItemW
InflateRect
GrayStringW
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowRgn
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetWindow
GetUserObjectSecurity
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetNextDlgTabItem
SetCursor
GetMonitorInfoW
GetMessageW
GetMessageTime
GetMessagePos
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
GetMenuContextHelpId
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCaretBlinkTime
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FillRect
EqualRect
EnumDisplaySettingsW
EnumDisplaySettingsExW
EnumDisplaySettingsExA
EnumDisplayMonitors
EnumDisplayDevicesW
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawStateW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyAcceleratorTable
DeleteMenu
DeferWindowPos
DefWindowProcW
DefWindowProcA
DefMDIChildProcW
DefFrameProcW
DdeQueryStringA
CreateWindowExW
CreatePopupMenu
CreateMenu
CreateIconIndirect
CreateDialogIndirectParamW
CreateDesktopW
CreateAcceleratorTableW
CountClipboardFormats
CopyRect
CopyImage
CopyIcon
CopyAcceleratorTableW
CloseClipboard
ClientToScreen
CheckMenuItem
CheckDlgButton
CharUpperW
CharUpperBuffW
CharNextW
CharLowerBuffW
CallWindowProcW
CallNextHookEx
SetClipboardData
SetClassLongW
SetCapture
SetActiveWindow
SendMessageW
SendDlgItemMessageW
SendDlgItemMessageA
ScrollWindow
ScreenToClient
ReuseDDElParam
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterHotKey
RegisterClipboardFormatW
RegisterClassW
RegisterClassExA
RedrawWindow
RealChildWindowFromPoint
PtInRect
LoadIconA
AdjustWindowRectEx
AppendMenuW
BeginDeferWindowPos
BeginPaint
BringWindowToTop
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
OpenClipboard
OffsetRect
NotifyWinEvent
MoveWindow
MonitorFromWindow
MonitorFromPoint
GetNextDlgGroupItem
ModifyMenuW
HideCaret

gdi32

DeleteDC
DeleteObject
Ellipse
EndFormPage
EngDeleteSemaphore
EngGetCurrentCodePage
EngStretchBltROP
EngTransparentBlt
EnumFontFamiliesExW
EnumFontFamiliesW
EnumFontsW
Escape
ExcludeClipRect
ExtFloodFill
ExtSelectClipRgn
ExtTextOutW
FONTOBJ_pifi
FillRgn
FrameRgn
GdiConvertFont
GdiFlush
GdiPrinterThunk
GdiSetAttrs
GdiStartPageEMF
GetBkColor
GetBoundsRect
GetCharWidth32A
GetCharWidthW
GetClipBox
GetColorSpace
GetDeviceCaps
GetEUDCTimeStamp
GetEnhMetaFilePaletteEntries
GetICMProfileA
GetLayout
GetMapMode
GetNearestPaletteIndex
GetObjectType
GetObjectW
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextCharsetInfo
GetTextColor
GetTextExtentPoint32W
GetTextExtentPointI
GetTextFaceW
GetTextMetricsW
DPtoLP
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
IntersectClipRect
LPtoDP
LineTo
MoveToEx
OffsetRgn
OffsetViewportOrgEx
OffsetWindowOrgEx
PATHOBJ_vEnumStart
PatBlt
Polygon
Polyline
PtInRegion
PtVisible
RealizePalette
RectVisible
Rectangle
RemoveFontResourceA
RemoveFontResourceW
RestoreDC
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipRgn
SelectObject
SelectPalette
SetBitmapDimensionEx
SetBkColor
SetBkMode
SetDIBColorTable
SetLayout
SetMapMode
SetPaletteEntries
SetPixel
SetPixelV
SetPolyFillMode
SetROP2
SetRectRgn
SetTextAlign
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StartDocA
StretchBlt
TextOutW
XFORMOBJ_bApplyXform
CreateRoundRectRgn
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePolygonRgn
CreatePenIndirect
CreatePen
CreatePatternBrush
CreatePalette
CreateHatchBrush
CreateFontIndirectW
CreateEllipticRgn
CreateDiscardableBitmap
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CopyMetaFileW
CombineRgn
ColorCorrectPalette
CloseMetaFile
CLIPOBJ_ppoGetPath
BitBlt
GetViewportExtEx
AddFontResourceW

comdlg32

GetFileTitleW

advapi32

RegDeleteKeyW
RegQueryValueExW
StartServiceW
RegSetValueExW
RegQueryValueW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyW
RegEnumKeyExW
RegDeleteValueW
RegOpenKeyA
RegCreateKeyExW
RegCloseKey
QueryServiceStatusEx
OpenServiceW
OpenSCManagerW
GetUserNameA
EnumDependentServicesW
ControlService
CloseServiceHandle

shell32

ExtractIconExA
SHParseDisplayName
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHGetFileInfoW
SHGetFileInfo
SHGetDesktopFolder
SHGetDataFromIDListW
SHFileOperationW
SHFileOperationA
DragFinish
DragQueryFileW
DuplicateIcon
ExtractAssociatedIconExA
ShellExecuteW
ExtractIconExW
SHAddToRecentDocs
SHAppBarMessage
SHBindToParent
SHBrowseForFolderW

ole32

OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleDuplicateData
OleFlushClipboard
OleGetClipboard
OleInitialize
OleIsCurrentClipboard
OleLockRunning
OleTranslateAccelerator
OleUninitialize
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
DoDragDrop
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterMessageFilter
CoLockObjectExternal
CoInitializeEx
CoInitialize
CoGetClassObject
CoFreeUnusedLibraries
CoFileTimeNow
CoCreateInstance
CoCreateGuid
CLSIDFromString
CLSIDFromProgID
IsAccelerator

shlwapi

StrRetToStrW
StrRChrA
StrChrW
SHDeleteKeyW
PathUnExpandEnvStringsW
PathStripToRootW
PathRemoveFileSpecW
PathIsUNCW
PathFindFileNameW
AssocQueryStringW
PathFindExtensionW

comctl32

ImageList_GetIcon
ImageList_GetIconSize

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

Sections

.text
Size: 554KB - Virtual size: 554KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39a4de3b45e7798f503b6dc37a6cd947

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

c9:be:03:b7:59:b3:c9:58:ed:3b:bf:b0:01:50:63:09Certificate

Extended Key Usages

Key Usages

bc:a6:b7:f7:10:4b:a4:1a:50:05:65:34:c2:a0:62:d1:11:e3:c1:65Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

shlwapi

comctl32

imm32

Sections

.text Size: 554KB - Virtual size: 554KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 13KB - Virtual size: 12KB

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

c9:be:03:b7:59:b3:c9:58:ed:3b:bf:b0:01:50:63:09
Certificate

bc:a6:b7:f7:10:4b:a4:1a:50:05:65:34:c2:a0:62:d1:11:e3:c1:65
Signer

.text
Size: 554KB - Virtual size: 554KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 13KB - Virtual size: 12KB