32d6f82d3078f7dc1288fdb999541c6f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

32d6f82d3078f7dc1288fdb999541c6f_JaffaCakes118
Size

75KB
MD5

32d6f82d3078f7dc1288fdb999541c6f
SHA1

7339440dc42f10a3488c0f724de32949e1fb9650
SHA256

010687ca7fa68a776e66f7973fbc1fe38e898a1a0e143cadc69c66556d5c29d7
SHA512

547c65826da3584fe8c5e87c7800128f764068f5bdfe3231d7cb3d0f47ea2419f597562a315f8269c912a30119d338ab7727363a1b1cdfe59d6d054e4ca6f9bc
SSDEEP

1536:7KN99vZOSXf2qL0mseSL7HpOwIhhdeIStl:+H9hOSXOqDQHpOwuerb

Score

1^/10

Malware Config

Signatures

Files

32d6f82d3078f7dc1288fdb999541c6f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f0592dcc43ba022ee12afd81d9ce1382

Code Sign

1b:5d:65:19:a1:99:87:a7:49:c4:c9:0a:ec:f1:a3:3b
Certificate

Issuer

CN=NCrG992VieeQ

Not Before

14/03/2012, 06:19

Not After

31/12/2039, 23:59

Subject

CN=NCrG992VieeQ

Extended Key Usages

ExtKeyUsageCodeSigning

22:b7:ef:75:c0:13:90:89:30:df:a4:5f:ec:62:f6:c8:ce:96:c2:e7
Signer

Actual PE Digest

22:b7:ef:75:c0:13:90:89:30:df:a4:5f:ec:62:f6:c8:ce:96:c2:e7

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
LoadLibraryA
CreateFileA
lstrlenA
GetWindowsDirectoryA
lstrcpyA
GetProcAddress

user32

SetTimer
SetWindowPos
SetWindowsHookExW
ShowWindowAsync
SystemParametersInfoA
VkKeyScanW
WaitForInputIdle
SetScrollPos
SetMenuDefaultItem
SetMenu
SetLayeredWindowAttributes
SetForegroundWindow
SetCaretBlinkTime
SendNotifyMessageW
SendNotifyMessageA
SendMessageTimeoutA
SendInput
SendIMEMessageExW
SendDlgItemMessageA
ScrollWindowEx
ScreenToClient
ReuseDDElParam
RegisterDeviceNotificationA
RegisterClassW
PostQuitMessage
PostMessageA
OemToCharA
MonitorFromRect
LookupIconIdFromDirectoryEx
LoadKeyboardLayoutW
IsDialogMessageA
CallWindowProcA
ChangeDisplaySettingsW
ChangeMenuA
CharLowerW
CharPrevA
CharToOemBuffA
CharToOemBuffW
CharUpperW
ChildWindowFromPointEx
CreateDesktopW
CreateDialogIndirectParamA
IsClipboardFormatAvailable
CreateDialogParamA
CreateIcon
CreateMDIWindowA
CreateMDIWindowW
CreateWindowExA
DdeDisconnectList
DdeGetData
DdeInitializeW
DdeQueryConvInfo
DdeQueryNextServer
DdeReconnect
DeleteMenu
DispatchMessageW
DlgDirListA
DlgDirListW
DlgDirSelectExW
DrawAnimatedRects
DrawMenuBar
DrawTextA
DrawTextW
EnumDisplaySettingsExA
EnumDisplaySettingsW
EnumThreadWindows
EnumWindowStationsA
GetCaretBlinkTime
GetClassNameW
GetClipboardFormatNameA
GetCursor
GetFocus
GetIconInfo
GetKeyboardType
GetMenuDefaultItem
GetMenuItemRect
GetNextDlgGroupItem
GetPriorityClipboardFormat
GetProcessDefaultLayout
GetPropA
GetPropW
GetShellWindow
GetTitleBarInfo
GetWindowLongA
GetWindowModuleFileName
GetWindowPlacement
GrayStringA
BeginDeferWindowPos
IMPQueryIMEW
InvalidateRgn
IsChild

comdlg32

PageSetupDlgW
ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
ChooseColorA
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW

advapi32

RegOpenKeyW

ole32

OleDraw
OleDuplicateData
OleGetAutoConvert
OleGetIconOfClass
OleNoteObjectVisible
OleRegEnumFormatEtc
OleRegGetUserType
ProgIDFromCLSID
STGMEDIUM_UserSize
STGMEDIUM_UserUnmarshal
SetDocumentBitStg
StgConvertPropertyToVariant
StgCreateDocfile
StgCreateDocfileOnILockBytes
StgGetIFillLockBytesOnFile
StgOpenStorageEx
StgOpenStorageOnILockBytes
StringFromGUID2
StringFromIID
UpdateDCOMSettings
UtConvertDvtd16toDvtd32
UtGetDvtd16Info
UtGetDvtd32Info
WdtpInterfacePointer_UserSize
WriteClassStg
OleCreateLinkToFileEx
OleCreateLinkFromDataEx
OleCreateFromFileEx
OleBuildVersion
MkParseDisplayName
HkOleRegisterObject
HPALETTE_UserUnmarshal
HPALETTE_UserMarshal
HMETAFILE_UserUnmarshal
HMETAFILE_UserFree
HMENU_UserUnmarshal
HMENU_UserMarshal
HMENU_UserFree
HICON_UserUnmarshal
HICON_UserSize
HGLOBAL_UserMarshal
HGLOBAL_UserFree
HDC_UserSize
HDC_UserFree
HBRUSH_UserUnmarshal
HBRUSH_UserSize
HBITMAP_UserUnmarshal
HACCEL_UserFree
GetDocumentBitStg
EnableHookObject
CreatePointerMoniker
CreateOleAdviseHolder
CreateItemMoniker
CreateILockBytesOnHGlobal
CreateFileMoniker
CreateDataAdviseHolder
CreateClassMoniker
CoWaitForMultipleHandles
CoUnmarshalInterface
CoUnmarshalHresult
CoUninitialize
CoResumeClassObjects
CoReleaseServerProcess
CoRegisterMallocSpy
CoReactivateObject
CoLockObjectExternal
CoLoadLibrary
CoIsOle1Class
CoIsHandlerConnected
CoInstall
CoImpersonateClient
CoGetStdMarshalEx
CoGetInterfaceAndReleaseStream
CoGetInstanceFromIStorage
CoGetClassObject
CoGetCallContext
CoFreeUnusedLibraries
CoFileTimeToDosDateTime
CoDisableCallCancellation
CoCreateInstance
CoAllowSetForegroundWindow
CLIPFORMAT_UserUnmarshal
CLIPFORMAT_UserFree
OleConvertIStorageToOLESTREAMEx
CoGetMalloc

comctl32

ord8
CreatePropertySheetPageA
CreatePropertySheetPageW
CreateStatusWindow
ord7
_TrackMouseEvent
ord3
PropertySheetW
PropertySheetA
PropertySheet
ord13
ord14
InitializeFlatSB
InitMUILanguage
InitCommonControlsEx
ord17
ImageList_Write
ImageList_SetOverlayImage
ImageList_SetImageCount
ImageList_SetIconSize
ImageList_SetFilter
ImageList_SetDragCursorImage
ImageList_SetBkColor
ImageList_Replace
ImageList_Remove
ImageList_Read
ImageList_Merge
ImageList_LoadImageA
ImageList_LoadImage
ImageList_GetImageCount
ImageList_GetIcon
ImageList_GetDragImage
ImageList_EndDrag
ImageList_Duplicate
ImageList_DrawIndirect
ImageList_DrawEx
ImageList_Draw
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_BeginDrag
ImageList_AddMasked
ImageList_Add
GetMUILanguage
ord4
FlatSB_ShowScrollBar
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollRange
FlatSB_GetScrollProp
FlatSB_GetScrollPos
FlatSB_EnableScrollBar
DrawStatusTextW
ord5
DrawStatusText
ord15
CreateToolbarEx

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f0592dcc43ba022ee12afd81d9ce1382

Code Sign

1b:5d:65:19:a1:99:87:a7:49:c4:c9:0a:ec:f1:a3:3bCertificate

Extended Key Usages

22:b7:ef:75:c0:13:90:89:30:df:a4:5f:ec:62:f6:c8:ce:96:c2:e7Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

ole32

comctl32

Sections

.text Size: 12KB - Virtual size: 12KB

.text1 Size: 55KB - Virtual size: 54KB

.data Size: 1024B - Virtual size: 644B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 1KB

1b:5d:65:19:a1:99:87:a7:49:c4:c9:0a:ec:f1:a3:3b
Certificate

22:b7:ef:75:c0:13:90:89:30:df:a4:5f:ec:62:f6:c8:ce:96:c2:e7
Signer

.text
Size: 12KB - Virtual size: 12KB

.text1
Size: 55KB - Virtual size: 54KB

.data
Size: 1024B - Virtual size: 644B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB