37103bd612bf7792a08fd87e89ccd53e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

37103bd612bf7792a08fd87e89ccd53e_JaffaCakes118
Size

293KB
MD5

37103bd612bf7792a08fd87e89ccd53e
SHA1

3a4aa098fb9dbe0bab3cdbbc4a38ba9793ad26c0
SHA256

89e912476eb1da9796e41dc1f0b060476449f3254a05fd51a9882398e8bb9b8f
SHA512

e2852d3f3bda9ef00aa91b93ad77f9455cc90772239c3469fba0baf17ca2deb5cf8bfd824030bab214261c8f01da2d3b19ee8cf87ff59662e6e5237fe185d966
SSDEEP

6144:DDaWemNSKKUtjZoszfaWDGVVGlkUiXYgugLFjVWwnWTH7ho:PfeK5Z/DmdXYsRV+rW

Score

1^/10

Malware Config

Signatures

Files

37103bd612bf7792a08fd87e89ccd53e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18fa0b44bc9900686146f19f18d710a5

Code Sign

7f:f5:10:74:37:ce:c2:45:bb:be:0d:12:5f:95:2f:25
Certificate

Issuer

CN=2352323

Not Before

11/02/2012, 05:41

Not After

31/12/2039, 23:59

Subject

CN=2352323

Extended Key Usages

ExtKeyUsageCodeSigning

fe:f3:37:b2:63:62:d7:25:f9:82:06:aa:c2:16:fe:bd:80:ce:de:9f
Signer

Actual PE Digest

fe:f3:37:b2:63:62:d7:25:f9:82:06:aa:c2:16:fe:bd:80:ce:de:9f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
lstrlenW
lstrcpyW
CreateFileW
VirtualAlloc

user32

CreateDesktopA
EndPaint
SetMenuItemBitmaps
GetFocus
DestroyAcceleratorTable
DialogBoxParamA
IsHungAppWindow
GetMenuStringA
PostQuitMessage
IsDialogMessageA
TileChildWindows
GrayStringW
DdeAbandonTransaction
PeekMessageA
CharPrevW
ScrollWindow
wvsprintfW
CallWindowProcA
CallMsgFilterW
LoadIconW
SetCursor
GetListBoxInfo
DestroyCursor
DdeDisconnectList
EnumPropsW
RemovePropW
HideCaret
TileWindows
GetKBCodePage
AnimateWindow
DdeConnectList
FillRect
BlockInput
MonitorFromRect
SendMessageTimeoutW
GetSubMenu
SendMessageA
ShowCaret
IMPGetIMEA
CopyIcon
DdeQueryStringA
CreateCaret
ArrangeIconicWindows
CreateDialogParamA
EnableMenuItem
RegisterClipboardFormatW
DdeQueryNextServer
VkKeyScanExW
ExcludeUpdateRgn
MessageBoxW
DdeFreeDataHandle
DdeGetLastError
SetScrollPos
WaitForInputIdle
IsCharLowerA
MsgWaitForMultipleObjects
IsWindowVisible
InsertMenuW
OpenWindowStationW
CreateDialogParamW
DrawIconEx
GetMenuItemInfoA
DispatchMessageW
InvalidateRect
DlgDirSelectComboBoxExA
EndDialog
DefMDIChildProcA
GetMenuDefaultItem
RegisterClipboardFormatA
EnumDisplaySettingsExA
GetKeyboardLayoutList
TrackMouseEvent
GetAltTabInfo
CreatePopupMenu
LoadKeyboardLayoutW
ChildWindowFromPointEx
GetKeyboardType
DdeCreateStringHandleW
SetWinEventHook
wvsprintfA
IsCharUpperW
GetIconInfo
GetMenuItemID
CreateWindowExA
OemToCharBuffW
FlashWindow
SwitchDesktop
InternalGetWindowText
GetKeyboardLayout
RegisterWindowMessageW
GetWindowTextW
CallWindowProcW

advapi32

RegOpenKeyW

comctl32

ord16
ImageList_Destroy
CreateToolbarEx
InitializeFlatSB
PropertySheetA
InitMUILanguage
ImageList_AddIcon
ImageList_GetImageRect
FlatSB_SetScrollProp
FlatSB_EnableScrollBar
ImageList_Remove
ord4
ImageList_Replace
GetMUILanguage
PropertySheet
ImageList_Draw
FlatSB_GetScrollRange
FlatSB_SetScrollRange
ord3
DestroyPropertySheetPage
ImageList_DragEnter
ImageList_SetFilter
CreateStatusWindowW
ImageList_DrawIndirect
ImageList_Write
FlatSB_GetScrollPos
CreatePropertySheetPageW
ImageList_DragLeave
ImageList_GetImageCount
ord8
_TrackMouseEvent
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_SetBkColor
ImageList_LoadImageA
ord7
CreateStatusWindow
ImageList_AddMasked
ord14
ImageList_SetOverlayImage
ImageList_GetIconSize
ImageList_Copy
FlatSB_SetScrollPos
DrawStatusTextW
ImageList_DrawEx
ImageList_Read
ImageList_GetImageInfo
ImageList_ReplaceIcon
ord6
ord17
ord13
ImageList_Add
ImageList_SetIconSize
UninitializeFlatSB
ImageList_Duplicate
ImageList_LoadImageW
FlatSB_ShowScrollBar
ImageList_BeginDrag
ImageList_DragMove
ImageList_SetImageCount
ImageList_LoadImage
ImageList_EndDrag
ImageList_SetDragCursorImage
ImageList_GetIcon
CreatePropertySheetPage
PropertySheetW
FlatSB_GetScrollInfo

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textV2
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textF4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.textV1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

18fa0b44bc9900686146f19f18d710a5

Code Sign

7f:f5:10:74:37:ce:c2:45:bb:be:0d:12:5f:95:2f:25Certificate

Extended Key Usages

fe:f3:37:b2:63:62:d7:25:f9:82:06:aa:c2:16:fe:bd:80:ce:de:9fSigner

Headers

File Characteristics

Imports

kernel32

user32

advapi32

comctl32

Sections

.text Size: 3KB - Virtual size: 3KB

.textV2 Size: 276KB - Virtual size: 275KB

.textF4 Size: 1KB - Virtual size: 1KB

.data Size: 5KB - Virtual size: 4KB

.textV1 Size: 1024B - Virtual size: 1000B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 1024B - Virtual size: 968B

7f:f5:10:74:37:ce:c2:45:bb:be:0d:12:5f:95:2f:25
Certificate

fe:f3:37:b2:63:62:d7:25:f9:82:06:aa:c2:16:fe:bd:80:ce:de:9f
Signer

.text
Size: 3KB - Virtual size: 3KB

.textV2
Size: 276KB - Virtual size: 275KB

.textF4
Size: 1KB - Virtual size: 1KB

.data
Size: 5KB - Virtual size: 4KB

.textV1
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 1024B - Virtual size: 968B