02c00feb848851d22ad97c8a30c92997_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

02c00feb848851d22ad97c8a30c92997_JaffaCakes118
Size

24KB
MD5

02c00feb848851d22ad97c8a30c92997
SHA1

9bc99de9d121f3153346678bccd7c24797dc66ed
SHA256

7b342f1643d40a8c62073f1db82508b3e811c5067f29150c1589dbcb20f6e920
SHA512

cc9f9d9cdf8aeac1ed7528db7bc935d26ac9bb118ba48295f17a907f08e88dc427f8860ae4928d731ab75eaaeaa086bc1c1ff312da61e21d80b4f33c6dcb4baf
SSDEEP

384:/pr3W/1Nyl8ETI3M9oWLEpmOwVKE7MqaMcXVJymIuWHNhmhh4WWieZWO5:/pr3A1Nq8ET9DEpmRX7Jg0uWthmhhdeB

Score

1^/10

Malware Config

Signatures

Files

02c00feb848851d22ad97c8a30c92997_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c19436fae5622582502f19b7b9c6245f

Code Sign

2c:97:e6:33:fd:29:aa:4b:d0:85:0e:65:dd:02:aa
Certificate

Issuer

CN=yprYsj1KNRia

Not Before

12/03/2012, 12:03

Not After

31/12/2039, 23:59

Subject

CN=yprYsj1KNRia

Extended Key Usages

ExtKeyUsageCodeSigning

b0:0d:3f:f7:29:70:8d:5f:2f:01:4c:8a:4e:6f:75:f0:41:f2:ad:78
Signer

Actual PE Digest

b0:0d:3f:f7:29:70:8d:5f:2f:01:4c:8a:4e:6f:75:f0:41:f2:ad:78

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileSectionA
WriteProfileSectionW
_lopen
WriteConsoleOutputCharacterA
lstrcmpiW
lstrcpyW
WriteConsoleOutputAttribute
WaitForSingleObjectEx
TransactNamedPipe
TerminateProcess
SetVolumeLabelA
SetTimeZoneInformation
SetThreadIdealProcessor
SetTapePosition
SetPriorityClass
SetMessageWaitingIndicator
SetLocaleInfoA
SetFilePointerEx
SetConsoleTitleW
SetConsoleCP
SetCommTimeouts
RtlZeroMemory
ResumeThread
ReplaceFileW
ReadConsoleOutputCharacterW
OpenProcess
OpenMutexW
MultiByteToWideChar
Module32NextW
Module32FirstW
Module32First
MapUserPhysicalPagesScatter
LockFileEx
LocalSize
LocalFileTimeToFileTime
IsValidLocale
IsBadStringPtrA
HeapCreate
GlobalUnfix
GlobalMemoryStatusEx
GlobalDeleteAtom
GlobalAlloc
GetWindowsDirectoryA
GetVolumePathNameW
GetTapeStatus
GetSystemWindowsDirectoryW
GetSystemTimeAsFileTime
GetStringTypeExA
GetShortPathNameA
GetProfileIntW
GetModuleHandleA
GetProfileIntA
GetProcessVersion
GetProcessShutdownParameters
GetProcessIoCounters
GetPrivateProfileStringW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
GetPrivateProfileSectionNamesA
GetModuleFileNameA
GetLongPathNameW
GetFileSizeEx
GetFileAttributesExA
GetEnvironmentStringsA
GetEnvironmentStrings
GetConsoleAliasesLengthA
GetComputerNameExW
GetCommandLineW
GetCommProperties
GetCommMask
GetCPInfoExW
GetBinaryTypeA
GetBinaryType
FreeResource
FlushViewOfFile
FlushConsoleInputBuffer
FindNextFileW
FindFirstFileW
FindFirstFileExA
FindFirstChangeNotificationA
FindAtomA
EnumResourceLanguagesA
DeviceIoControl
DeleteTimerQueueEx
DeleteFiber
DefineDosDeviceW
CreateWaitableTimerW
CreateJobObjectW
CreateHardLinkW
CreateEventA
CreateDirectoryExA
ConvertDefaultLocale
CompareFileTime
CancelIo
BuildCommDCBAndTimeoutsA
AllocConsole
GetProcAddress
GetTempPathA
lstrcmpi

msvcrt

memset

user32

wsprintfW
WinHelpW
WINNLSEnableIME
VkKeyScanW
VkKeyScanExW
UnloadKeyboardLayout
UnionRect
SubtractRect
SetWindowsHookExW
SetWindowLongA
SetMessageExtraInfo
SetMenuDefaultItem
SetMenu
SetKeyboardState
SetDebugErrorLevel
SetClassWord
SendNotifyMessageW
SendMessageCallbackW
SendMessageCallbackA
SendMessageA
ScreenToClient
RemovePropW
RemovePropA
RegisterShellHookWindow
RegisterDeviceNotificationW
PostQuitMessage
PeekMessageW
PackDDElParam
OpenClipboard
OemToCharW
OemToCharBuffA
NotifyWinEvent
MonitorFromWindow
MessageBoxW
MessageBoxA
MapWindowPoints
LookupIconIdFromDirectory
IsRectEmpty
IsHungAppWindow
GetWindowThreadProcessId
GetWindowPlacement
GetWindowInfo
GetWindowDC
GetUserObjectInformationA
GetUpdateRgn
GetSystemMenu
GetShellWindow
GetPriorityClipboardFormat
GetMouseMovePointsEx
GetMenuStringW
GetMenuState
GetMenuDefaultItem
GetLastActivePopup
GetIconInfo
GetComboBoxInfo
GetClipboardViewer
GetClassLongW
GetCaretPos
GetAncestor
EnumPropsW
EnumPropsExA
EnumPropsA
EnumDisplaySettingsW
EnumDisplayDevicesA
EnumDesktopsW
EnumClipboardFormats
EnableScrollBar
DrawEdge
DrawAnimatedRects
DispatchMessageW
DialogBoxIndirectParamW
DestroyMenu
DefWindowProcA
DdeQueryStringA
DdeKeepStringHandle
DdeInitializeW
DdeImpersonateClient
DdeAbandonTransaction
CreateWindowStationW
CreateWindowExA
CreatePopupMenu
CreateDialogParamA
CreateCursor
CloseDesktop
CheckMenuRadioItem
ChangeMenuA
ChangeDisplaySettingsExW
CascadeChildWindows
CallMsgFilterW
CallMsgFilterA
BlockInput
GetMonitorInfoW

gdi32

CloseEnhMetaFile
CombineTransform
CopyEnhMetaFileW
CreateColorSpaceW
CreateDIBitmap
CreateEllipticRgnIndirect
CreateEnhMetaFileW
CreateFontW
CreatePenIndirect
CreatePolyPolygonRgn
CreatePolygonRgn
DeleteColorSpace
DeleteDC
DeleteEnhMetaFile
DeviceCapabilitiesExA
DeviceCapabilitiesExW
Ellipse
EnableEUDC
EngCreateSemaphore
EngFreeModule
EngQueryEMFInfo
EngUnicodeToMultiByteN
EngUnlockSurface
EngWideCharToMultiByte
EnumEnhMetaFile
EnumFontFamiliesExA
EnumFontFamiliesW
EnumFontsA
ExtCreatePen
ExtFloodFill
ExtTextOutA
FONTOBJ_vGetInfo
FillRgn
GdiAddGlsBounds
GdiConvertAndCheckDC
GdiConvertBitmap
GdiConvertFont
GdiConvertRegion
GdiEntry8
GdiFixUpHandle
GdiGetDevmodeForPage
GdiPlayPrivatePageEMF
GdiPlayScript
GdiSetAttrs
Arc
GdiSwapBuffers
GetBitmapBits
GetCharABCWidthsFloatA
GetCharABCWidthsI
GetCharWidthA
GetCharacterPlacementA
GetCurrentObject
GetDeviceGammaRamp
GetGlyphOutline
GetGlyphOutlineW
GetKerningPairsA
GetMetaFileBitsEx
GetObjectType
GetPixelFormat
GetRegionData
GetRelAbs
GetTextAlign
GetTextColor
GetTextExtentPointA
HT_Get8BPPFormatPalette
InvertRgn
NamedEscape
OffsetRgn
PATHOBJ_vEnumStart
PlgBlt
RemoveFontResourceTracking
ResetDCW
RoundRect
STROBJ_bGetAdvanceWidths
STROBJ_vEnumStart
SaveDC
SelectFontLocal
SelectObject
SetBitmapBits
SetBitmapDimensionEx
SetColorAdjustment
SetICMProfileW
SetMagicColors
SetTextCharacterExtra
SetWindowExtEx
UnloadNetworkFonts
UpdateColors
XLATEOBJ_iXlate
GdiSetLastError
AddFontResourceExA

advapi32

RegOpenKeyExW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c19436fae5622582502f19b7b9c6245f

Code Sign

2c:97:e6:33:fd:29:aa:4b:d0:85:0e:65:dd:02:aaCertificate

Extended Key Usages

b0:0d:3f:f7:29:70:8d:5f:2f:01:4c:8a:4e:6f:75:f0:41:f2:ad:78Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

advapi32

Sections

.text Size: 17KB - Virtual size: 16KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 2KB

2c:97:e6:33:fd:29:aa:4b:d0:85:0e:65:dd:02:aa
Certificate

b0:0d:3f:f7:29:70:8d:5f:2f:01:4c:8a:4e:6f:75:f0:41:f2:ad:78
Signer

.text
Size: 17KB - Virtual size: 16KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 2KB