236775143ea81067625ecea0945b7060_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

236775143ea81067625ecea0945b7060_JaffaCakes118
Size

227KB
MD5

236775143ea81067625ecea0945b7060
SHA1

5291fa4efec54788af26d51648ff000a0c1a112e
SHA256

03de3aa6be9646208e2f92195c07b0cbd72c6e09cc6ad426c164f0ce34bb0e98
SHA512

1d17e7330a22b21de6cd1274b64b20cf4bc9ab2912f7924fea22c665a89f498a20c3aff7fd7b1a03ab7e55a3354de9ecf75cbd978d11ba162062b097d315c324
SSDEEP

3072:VtOTMD46HZAwHslto0idwDbciHwVQQUO/lPW+DPfrzP:TPt6NtojwDAiH8aONbDPfrzP

Score

1^/10

Malware Config

Signatures

Files

236775143ea81067625ecea0945b7060_JaffaCakes118
.dll windows:5 windows x86 arch:x86

a12eaafd4b27cf1f6a98d2322c9f425a

Code Sign

31:64:01:1c:37:78:af:b1:45:cd:8e:8f:85:e8:b3:02
Certificate

Issuer

CN=GHW2

Not Before

22/06/2012, 04:50

Not After

31/12/2039, 23:59

Subject

CN=GHW2

Extended Key Usages

ExtKeyUsageCodeSigning

fd:52:1d:80:19:2b:ab:7d:34:5c:c9:9d:59:1e:c0:57:5c:d0:0d:02
Signer

Actual PE Digest

fd:52:1d:80:19:2b:ab:7d:34:5c:c9:9d:59:1e:c0:57:5c:d0:0d:02

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumResourceNamesW
EnumSystemLanguageGroupsA
FindNextVolumeMountPointA
FormatMessageA
GetCurrentThreadId
GetModuleHandleA
GetPrivateProfileStringA
GetShortPathNameA
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetTickCount
GetVersionExA
DeleteFileA
LCMapStringW
MoveFileA
MultiByteToWideChar
OpenFileMappingW
OpenMutexW
PrepareTape
SetLastError
SetThreadAffinityMask
SetThreadPriorityBoost
Thread32Next
WriteFileEx
WriteProfileSectionW
VirtualAllocEx
CreateFileW
lstrcatW
GlobalFindAtomW
GetWindowsDirectoryW

user32

EndPaint
BeginPaint
UpdateWindow
ScrollWindow
SetScrollPos
SetScrollRange
ReleaseDC
GetDC
AppendMenuA
CallMsgFilterW
CallWindowProcW
CascadeWindows
ChangeDisplaySettingsW
CharToOemA
CharUpperW
CheckMenuItem
ChildWindowFromPoint
CloseDesktop
CopyAcceleratorTableA
CopyImage
CopyRect
CreateIconFromResourceEx
CreateMDIWindowA
CreatePopupMenu
DdeClientTransaction
DdeCreateStringHandleW
DdeFreeStringHandle
DdePostAdvise
DdeQueryStringW
DdeSetQualityOfService
DeregisterShellHookWindow
DrawStateA
DrawStateW
EndDialog
PostQuitMessage
EnumChildWindows
GetAltTabInfo
GetAsyncKeyState
GetClassLongW
GetClassNameW
GetClipboardOwner
GetClipboardSequenceNumber
GetComboBoxInfo
GetInputState
GetKeyboardLayout
GetLastActivePopup
GetMenuItemID
GetMessageA
GetProcessWindowStation
GetScrollPos
GetScrollRange
GetSubMenu
GetUpdateRect
GetWindowDC
GetWindowLongW
GetWindowRgn
GetWindowThreadProcessId
GetWindowWord
IMPGetIMEA
IMPQueryIMEA
IMPSetIMEW
InSendMessageEx
InsertMenuItemA
IsCharAlphaNumericW
IsCharUpperW
IsDialogMessageA
LoadKeyboardLayoutW
LockWorkStation
MoveWindow
OemToCharBuffW
OemToCharW
OpenWindowStationA
RealChildWindowFromPoint
RegisterDeviceNotificationW
RemoveMenu
ScrollDC
SendDlgItemMessageA
SendMessageCallbackW
SendMessageW
SendNotifyMessageW
SetClassLongW
SetDlgItemTextW
SetForegroundWindow
SetScrollInfo
SetSysColors
SetWindowWord
SystemParametersInfoA
SystemParametersInfoW
TabbedTextOutA
TileWindows
ToAscii
TrackPopupMenuEx
TranslateMessage
UnhookWinEvent
UnhookWindowsHookEx
VkKeyScanA
VkKeyScanExA
WaitForInputIdle
WindowFromDC
DefWindowProcA
LoadIconA
CreateWindowExA
RegisterClassExA
EndMenu

gdi32

GetTextMetricsA
TextOutA

advapi32

RegOpenKeyExA

Sections

.text
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data7
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data6
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a12eaafd4b27cf1f6a98d2322c9f425a

Code Sign

31:64:01:1c:37:78:af:b1:45:cd:8e:8f:85:e8:b3:02Certificate

Extended Key Usages

fd:52:1d:80:19:2b:ab:7d:34:5c:c9:9d:59:1e:c0:57:5c:d0:0d:02Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 202KB - Virtual size: 202KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 5KB - Virtual size: 4KB

.data7 Size: 2KB - Virtual size: 1KB

.data6 Size: 2KB - Virtual size: 1KB

.data5 Size: 2KB - Virtual size: 1KB

.data4 Size: 2KB - Virtual size: 1KB

.data3 Size: 2KB - Virtual size: 1KB

.data2 Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

31:64:01:1c:37:78:af:b1:45:cd:8e:8f:85:e8:b3:02
Certificate

fd:52:1d:80:19:2b:ab:7d:34:5c:c9:9d:59:1e:c0:57:5c:d0:0d:02
Signer

.text
Size: 202KB - Virtual size: 202KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 5KB - Virtual size: 4KB

.data7
Size: 2KB - Virtual size: 1KB

.data6
Size: 2KB - Virtual size: 1KB

.data5
Size: 2KB - Virtual size: 1KB

.data4
Size: 2KB - Virtual size: 1KB

.data3
Size: 2KB - Virtual size: 1KB

.data2
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB