30e881a3988e3f38f58698b2f9bb96c4_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

30e881a3988e3f38f58698b2f9bb96c4_JaffaCakes118
Size

45KB
MD5

30e881a3988e3f38f58698b2f9bb96c4
SHA1

380da287773281f36517ab501ae195fb0cb28587
SHA256

9e0eecfc5fefd5ecdc5cc205a1585fe30c5d9bac455c981d03b57c965e31fa9f
SHA512

d7b8631ea383de0f9be86ea17b13ba5c2331f7c7586c818ae42518a8124eeb39e20f7074d01eef7df289db787572efed6c5c4c638d45d51a26d6fe13dc7ecc77
SSDEEP

768:bclMNYiKC+qzfevpe4sQ72uKcopRaQP0xxXllllllllllllllllllllllllllll/:jR+MevpkCXx2vuyfC9dhheenh

Score

1^/10

Malware Config

Signatures

Files

30e881a3988e3f38f58698b2f9bb96c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5603514a94f741560229713b467ec227

Code Sign

10:f6:47:99:b9:2e:f5:4f:ba:c3:28:64:2a:70:0f:e7
Certificate

Issuer

CN=z3t6TXlbXlEE

Not Before

12-03-2012 08:21

Not After

31-12-2039 23:59

Subject

CN=z3t6TXlbXlEE

Extended Key Usages

ExtKeyUsageCodeSigning

4c:a0:c9:06:8a:b6:7c:1a:2d:b3:1f:bd:a6:7a:a2:b7:40:51:1a:ea
Signer

Actual PE Digest

4c:a0:c9:06:8a:b6:7c:1a:2d:b3:1f:bd:a6:7a:a2:b7:40:51:1a:ea

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
LoadLibraryW
GetProcAddress
VirtualAlloc
CopyFileW
BuildCommDCBAndTimeoutsW
SetCurrentDirectoryW
GlobalWire
InterlockedExchange
SetComputerNameA
GetDateFormatA
WideCharToMultiByte
IsBadHugeWritePtr
IsBadStringPtrW
GetComputerNameExA
SetEnvironmentVariableW
PeekConsoleInputA
LocalShrink
CreateToolhelp32Snapshot
TerminateThread
TerminateJobObject
MoveFileExA
GlobalGetAtomNameA
FreeResource
GetSystemDefaultUILanguage
InterlockedDecrement
HeapValidate
CompareStringW
SearchPathA
DisableThreadLibraryCalls
GetCPInfoExA
GetCurrentConsoleFont
GetCommProperties
AddAtomW
QueryPerformanceFrequency
GlobalFree
ExitProcess
MapUserPhysicalPagesScatter
BeginUpdateResourceA
GetBinaryTypeA
WriteConsoleOutputW
ResetWriteWatch
GlobalLock
GetStringTypeA
CommConfigDialogA
WinExec
QueryDosDeviceA
GetFileTime
GetCommModemStatus
TlsAlloc
FindFirstFileExW
UnregisterWait
ExpandEnvironmentStringsA
TerminateProcess
GetEnvironmentStringsA
SetCommState
DisconnectNamedPipe
GetModuleHandleW
GetExitCodeThread
lstrcmpiW
HeapSize
CopyFileExA
GlobalFlags
_lopen
GetLogicalDriveStringsA
GetSystemPowerStatus
FillConsoleOutputCharacterW
SetThreadExecutionState
GetSystemInfo
GenerateConsoleCtrlEvent
GetStdHandle
WaitCommEvent
GlobalReAlloc
HeapCreate
EnumCalendarInfoExW
GetEnvironmentVariableW
CommConfigDialogW
CreatePipe
UnlockFileEx
FindFirstFileA
FreeEnvironmentStringsW
GetVolumeInformationA
GlobalUnWire
ClearCommBreak
GetTimeFormatW
GetSystemTime
SetSystemTime
WriteConsoleW
OpenMutexA
LocalFlags
_llseek
EnumSystemLanguageGroupsA
SetConsoleActiveScreenBuffer
UnhandledExceptionFilter

user32

LoadCursorA
UnhookWinEvent
NotifyWinEvent
GetForegroundWindow
SendIMEMessageExW
GetScrollInfo
DrawTextExA
GetSystemMetrics
ShowCursor
GetMenuState
SetClipboardViewer
FrameRect
InSendMessageEx
CreateWindowExA
DdeGetData
RealGetWindowClassA
SetMenuItemInfoA
DefFrameProcW
DrawMenuBar
RegisterClassA
LoadKeyboardLayoutA
GetClassWord
CharUpperBuffW
GetClassInfoExA
IntersectRect
GetKeyNameTextA
SetWindowRgn
GetParent
EndPaint
ShowOwnedPopups
DdeCmpStringHandles
SetMenuContextHelpId
RemoveMenu
PostMessageA
WinHelpA
DdeQueryNextServer
VkKeyScanW
WindowFromDC
LoadMenuIndirectW
GetQueueStatus
EditWndProc
EnableMenuItem
SetWindowTextA
GetScrollPos
SystemParametersInfoA
SetActiveWindow
IsWindowEnabled
GetClipboardData
DlgDirSelectExW
GetShellWindow
RealGetWindowClass
ReleaseDC
MonitorFromPoint
GetWindowThreadProcessId
MessageBeep
UnregisterClassW
EnumWindowStationsA
GetMessagePos
EnumThreadWindows
AdjustWindowRect
CreateDialogParamA
EnumDisplayDevicesA
TranslateMDISysAccel
TabbedTextOutA
ChangeMenuW
IMPGetIMEW
IsMenu
DdeDisconnectList
SetWindowsHookExW
SetScrollInfo
ShowScrollBar
CreateIconFromResourceEx
GetDesktopWindow
OpenDesktopW
DdeReconnect
MapVirtualKeyExW
wsprintfW
PostThreadMessageW
ScrollDC
CreateDesktopW
GetUserObjectInformationW
CharToOemA
GetWindowInfo
DdeSetQualityOfService
GetDlgItemTextA
GetSubMenu
SendMessageTimeoutA
DdeConnect
GetClassNameW
keybd_event
GetGuiResources
GetTopWindow
RegisterShellHookWindow

gdi32

GetStockObject

advapi32

RegOpenKeyExA

shell32

ExtractAssociatedIconA
DragQueryFileAorW
ExtractIconEx
SHGetFolderPathW
SHPathPrepareForWriteW
SHBrowseForFolderW
ShellHookProc
ExtractAssociatedIconW
SHGetFolderLocation
ExtractAssociatedIconExW
SHBrowseForFolderA
ShellExecuteW
SHBindToParent
SHLoadInProc
CheckEscapesW
SHAppBarMessage
SHFileOperationA
SHFormatDrive
ShellExecuteEx
SHInvokePrinterCommandW
SHGetFolderPathA
Shell_NotifyIconA
DragAcceptFiles
SHGetDesktopFolder
SHGetSpecialFolderPathW
SHInvokePrinterCommandA
SHFreeNameMappings
SHQueryRecycleBinW
SHGetDiskFreeSpaceExW
SHCreateDirectoryExA
SHFileOperationW
SHQueryRecycleBinA
SHGetFileInfoA
ExtractIconW
SHCreateProcessAsUserW
CommandLineToArgvW
DragQueryPoint
ShellAboutW
SHGetDiskFreeSpaceA
Shell_NotifyIconW
SHAddToRecentDocs
ShellExecuteExW
SHGetPathFromIDListA
DragFinish
FindExecutableW
ExtractIconA
SHGetIconOverlayIndexW
SHGetFileInfo
DoEnvironmentSubstA
SHBrowseForFolder
FindExecutableA
ExtractAssociatedIconExA
SHFileOperation
SHEmptyRecycleBinW

shlwapi

StrStrIA
StrStrA
StrRStrIW
StrCmpNW
StrRChrIA
StrChrW
StrChrA
StrStrW
StrRChrA
StrCmpNIA
StrCmpNIW
StrRStrIA
StrChrIW

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5603514a94f741560229713b467ec227

Code Sign

10:f6:47:99:b9:2e:f5:4f:ba:c3:28:64:2a:70:0f:e7Certificate

Extended Key Usages

4c:a0:c9:06:8a:b6:7c:1a:2d:b3:1f:bd:a6:7a:a2:b7:40:51:1a:eaSigner

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

Sections

.text Size: 28KB - Virtual size: 28KB

.text3 Size: 1024B - Virtual size: 1000B

.text2 Size: 1KB - Virtual size: 1KB

.data Size: 7KB - Virtual size: 7KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

10:f6:47:99:b9:2e:f5:4f:ba:c3:28:64:2a:70:0f:e7
Certificate

4c:a0:c9:06:8a:b6:7c:1a:2d:b3:1f:bd:a6:7a:a2:b7:40:51:1a:ea
Signer

.text
Size: 28KB - Virtual size: 28KB

.text3
Size: 1024B - Virtual size: 1000B

.text2
Size: 1KB - Virtual size: 1KB

.data
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB