14a23e97f8d4e4f2c2b93f795eb15560_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

14a23e97f8d4e4f2c2b93f795eb15560_JaffaCakes118
Size

181KB
MD5

14a23e97f8d4e4f2c2b93f795eb15560
SHA1

97340c6149e32d76fea3a2c8cadf8fe5a98e33a3
SHA256

149c8a8c8325fb518b0fc245601f5e6a2283a4cb1506068248500b28bcad6083
SHA512

896d7c2e960bc414632fcab550cf08b9ec528f1615272c29aeb40bcdde7ab7973ebd0ff0183680704ad4c9467e6c2e0ca3472c65c8ed64426a2dffe35521683c
SSDEEP

3072:si9h/0vGtBOuIUw5pPX/+Y3afecc1GXeKxotHrNK+UDrVse2h:fztktvp/+YmGRUvJc

Score

1^/10

Malware Config

Signatures

Files

14a23e97f8d4e4f2c2b93f795eb15560_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1ec01047b898a2c075c87b411b39dcec

Code Sign

59:52:4b:90:0c:c6:56:79:b9:60:98:70:86:d7:5b:4e
Certificate

Issuer

CN=qw34t123tc125c1

Not Before

22-02-2012 06:51

Not After

31-12-2039 23:59

Subject

CN=qw34t123tc125c1

Extended Key Usages

ExtKeyUsageCodeSigning

37:b1:f0:4d:c8:49:e6:9b:ad:26:08:25:b1:7c:9f:f1:48:87:5f:29
Signer

Actual PE Digest

37:b1:f0:4d:c8:49:e6:9b:ad:26:08:25:b1:7c:9f:f1:48:87:5f:29

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
GetProcAddress
LoadLibraryA
VirtualAlloc
GetWindowsDirectoryW

user32

DdeInitializeA
DdeQueryConvInfo
DdeQueryStringA
DdeReconnect
DdeSetUserHandle
DdeUnaccessData
DefDlgProcW
DestroyWindow
DialogBoxIndirectParamA
DialogBoxIndirectParamW
DlgDirListA
DlgDirSelectComboBoxExA
DlgDirSelectComboBoxExW
DrawFocusRect
DrawIcon
DrawIconEx
DrawTextW
EnumClipboardFormats
EnumWindows
ExcludeUpdateRgn
FrameRect
GetActiveWindow
GetAltTabInfo
GetAsyncKeyState
GetCaretBlinkTime
GetClassInfoExA
GetClassInfoExW
GetClassLongW
GetClassWord
GetClientRect
GetClipCursor
GetClipboardData
GetClipboardSequenceNumber
GetDC
GetDCEx
GetDesktopWindow
GetDoubleClickTime
GetKeyboardLayoutNameA
GetLastActivePopup
GetLastInputInfo
GetMenuContextHelpId
GetMessageA
GetMessageTime
GetMonitorInfoA
GetProcessDefaultLayout
GetPropW
GetScrollInfo
GetTabbedTextExtentW
GetThreadDesktop
GetWindow
GetWindowLongA
GetWindowModuleFileName
GetWindowModuleFileNameA
GetWindowWord
HiliteMenuItem
DdeFreeDataHandle
InsertMenuA
IsCharAlphaNumericA
IsCharAlphaW
IsClipboardFormatAvailable
IsWindowEnabled
LoadBitmapA
LoadCursorA
LoadCursorFromFileA
LoadKeyboardLayoutA
LoadStringA
MapVirtualKeyExW
MapVirtualKeyW
MenuItemFromPoint
MonitorFromPoint
NotifyWinEvent
OemToCharA
OemToCharBuffW
OpenDesktopA
OpenWindowStationW
PackDDElParam
PeekMessageA
PostThreadMessageW
RealGetWindowClassW
RegisterDeviceNotificationA
RegisterShellHookWindow
RegisterWindowMessageA
ReleaseCapture
ScreenToClient
ScrollDC
ScrollWindow
SendMessageCallbackA
SendMessageTimeoutW
SetActiveWindow
SetCaretBlinkTime
SetDoubleClickTime
SetLastErrorEx
SetMenuContextHelpId
SetPropA
SetUserObjectSecurity
SetWindowContextHelpId
SetWindowRgn
SetWindowTextA
SetWindowsHookA
SetWindowsHookExA
SwapMouseButton
TrackPopupMenuEx
TranslateAcceleratorW
TranslateMDISysAccel
UnpackDDElParam
UpdateLayeredWindow
UpdateWindow
VkKeyScanExA
WINNLSEnableIME
WINNLSGetEnableStatus
WaitMessage
WindowFromDC
WindowFromPoint
keybd_event
wsprintfA
wvsprintfA
DdeAddData
CreateDialogParamA
CreateDialogIndirectParamW
CreateCursor
CreateCaret
CountClipboardFormats
CopyAcceleratorTableA
CloseWindowStation
CheckMenuItem
CharUpperBuffA
CharToOemBuffW
CharNextW
CharLowerBuffA
ChangeDisplaySettingsExA
CallWindowProcW
CallMsgFilterA
BringWindowToTop
BeginDeferWindowPos
ArrangeIconicWindows
AppendMenuW
AdjustWindowRectEx
InSendMessageEx

comdlg32

ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW
GetFileTitleA
FindTextW
ChooseColorA

ole32

BindMoniker
CLIPFORMAT_UserMarshal
CLIPFORMAT_UserSize
CLSIDFromProgID
CLSIDFromProgIDEx
CLSIDFromString
CoAllowSetForegroundWindow
CoBuildVersion
CoCopyProxy
CoCreateInstance
CoCreateObjectInContext
CoFileTimeNow
CoFreeUnusedLibraries
CoGetClassObject
CoGetCurrentProcess
CoGetInstanceFromIStorage
CoGetMalloc
CoGetMarshalSizeMax
CoGetObjectContext
CoInitialize
CoIsOle1Class
CoQueryProxyBlanket
CoQueryReleaseObject
CoRegisterChannelHook
CoRegisterClassObject
CoRegisterMallocSpy
CoRegisterMessageFilter
CoRegisterPSClsid
CoRegisterSurrogateEx
CoReleaseMarshalData
CoRevertToSelf
CoRevokeMallocSpy
CoSetCancelObject
CoTaskMemAlloc
CoUninitialize
CoUnloadingWOW
CoWaitForMultipleHandles
CreateAntiMoniker
CreateClassMoniker
CreateGenericComposite
CreateItemMoniker
CreateOleAdviseHolder
CreateStdProgressIndicator
DcomChannelSetHResult
DllDebugObjectRPCHook
FmtIdToPropStgName
FreePropVariantArray
GetClassFile
GetConvertStg
GetDocumentBitStg
HACCEL_UserFree
HACCEL_UserMarshal
HBITMAP_UserSize
HBITMAP_UserUnmarshal
HBRUSH_UserUnmarshal
HDC_UserMarshal
HDC_UserUnmarshal
HENHMETAFILE_UserFree
HENHMETAFILE_UserUnmarshal
HGLOBAL_UserFree
HGLOBAL_UserMarshal
HGLOBAL_UserSize
HICON_UserFree
HICON_UserMarshal
HMENU_UserFree
HMENU_UserUnmarshal
HMETAFILEPICT_UserUnmarshal
HMETAFILE_UserFree
HMETAFILE_UserMarshal
HWND_UserFree
HWND_UserUnmarshal
HkOleRegisterObject
IIDFromString
MkParseDisplayName
MonikerRelativePathTo
OleBuildVersion
OleConvertIStorageToOLESTREAM
OleCreateDefaultHandler
OleCreateEmbeddingHelper
OleCreateEx
OleCreateFromDataEx
OleCreateLink
OleCreateLinkEx
OleCreateLinkToFile
OleCreateMenuDescriptor
OleCreateStaticFromData
OleFlushClipboard
OleGetAutoConvert
OleGetIconOfFile
OleInitializeWOW
OleIsCurrentClipboard
OleLoad
OleLockRunning
OleNoteObjectVisible
OleRegGetUserType
OleRun
OleSaveToStream
OleSetAutoConvert
OleSetContainedObject
OleSetMenuDescriptor
OleUninitialize
OpenOrCreateStream
ReadClassStm
ReadFmtUserTypeStg
ReadOleStg
SNB_UserFree
SNB_UserMarshal
SNB_UserSize
STGMEDIUM_UserMarshal
SetConvertStg
SetDocumentBitStg
StgCreateDocfileOnILockBytes
StgCreatePropStg
StgCreateStorageEx
StgGetIFillLockBytesOnILockBytes
StgIsStorageFile
StgOpenStorageOnILockBytes
UtGetDvtd32Info
WdtpInterfacePointer_UserUnmarshal
WriteOleStg
WriteStringStream

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text6
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text5
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ec01047b898a2c075c87b411b39dcec

Code Sign

59:52:4b:90:0c:c6:56:79:b9:60:98:70:86:d7:5b:4eCertificate

Extended Key Usages

37:b1:f0:4d:c8:49:e6:9b:ad:26:08:25:b1:7c:9f:f1:48:87:5f:29Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

ole32

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 616B

.text6 Size: 2KB - Virtual size: 1KB

.text1 Size: 1024B - Virtual size: 1000B

.text2 Size: 1024B - Virtual size: 1000B

.text5 Size: 160KB - Virtual size: 160KB

.reloc Size: 2KB - Virtual size: 2KB

59:52:4b:90:0c:c6:56:79:b9:60:98:70:86:d7:5b:4e
Certificate

37:b1:f0:4d:c8:49:e6:9b:ad:26:08:25:b1:7c:9f:f1:48:87:5f:29
Signer

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 616B

.text6
Size: 2KB - Virtual size: 1KB

.text1
Size: 1024B - Virtual size: 1000B

.text2
Size: 1024B - Virtual size: 1000B

.text5
Size: 160KB - Virtual size: 160KB

.reloc
Size: 2KB - Virtual size: 2KB