3b8a883523c3926e8cb4e6e33f3613cf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3b8a883523c3926e8cb4e6e33f3613cf_JaffaCakes118
Size

112KB
MD5

3b8a883523c3926e8cb4e6e33f3613cf
SHA1

1b62ddb8e545012c19344f5d98be4195bc5bec0f
SHA256

c14c3da1f1d62df5dee5d925db683865a746b41ad645d1d8fb2bb63d47516bca
SHA512

d9a9ec72522e83dd535df85c06d34b8d0f46dfb02d2a0fe1687e8cab1dbcc68fcfe4af1f2e3bf127d4e9de4db7cdba424e7d6528fa038bc9d8be5907ed4d784e
SSDEEP

3072:wlDH7PaVNyA4I661CnxqHU9utit/a1aQB5yq:EDH7iVuKU+it/a1

Score

1^/10

Malware Config

Signatures

Files

3b8a883523c3926e8cb4e6e33f3613cf_JaffaCakes118
.dll windows:4 windows x86 arch:x86

74853b7d86b2dc051f12c34e5e19dc68

Code Sign

3a:db:3d:b1:a9:03:4e:45:b8:41:47:0b:ed:13:f0:d1
Certificate

Issuer

CN=7Tltl41ROBKK

Not Before

17/03/2012, 06:09

Not After

31/12/2039, 23:59

Subject

CN=7Tltl41ROBKK

Extended Key Usages

ExtKeyUsageCodeSigning

5c:94:ef:e9:47:19:64:d9:2e:e7:09:a2:a1:fd:65:ed:5e:88:cc:dc
Signer

Actual PE Digest

5c:94:ef:e9:47:19:64:d9:2e:e7:09:a2:a1:fd:65:ed:5e:88:cc:dc

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
GetLogicalDriveStringsA
LoadLibraryW
FindFirstVolumeMountPointA
UpdateResourceA
GetProcessTimes
CopyFileExW
CreateProcessA
WinExec
lstrcmpiA
GetHandleInformation
FreeUserPhysicalPages
WriteConsoleInputA
CreateJobObjectA
ChangeTimerQueueTimer
MoveFileWithProgressA
HeapFree
FoldStringW
lstrcmpW
GetProcessAffinityMask
GetSystemTimeAsFileTime
ProcessIdToSessionId
EnumDateFormatsExA
GetCurrentProcess
SwitchToThread
GetCommModemStatus
ResetEvent
GetSystemInfo
lstrcatA
RtlUnwind
SetConsoleCursorPosition
GetVolumeInformationA
AddAtomW
GetMailslotInfo
EnumUILanguagesA
SetConsoleCP
HeapDestroy
WaitForDebugEvent
SetConsoleWindowInfo
GetProcessIoCounters
BuildCommDCBW
GetWindowsDirectoryW
CopyFileW
GetCommProperties
WritePrivateProfileStructW
ScrollConsoleScreenBufferW
TlsSetValue
GetThreadSelectorEntry
InitAtomTable
GetConsoleCursorInfo
MoveFileExW
ExpandEnvironmentStringsA
GetACP
GlobalUnfix
SetProcessWorkingSetSize
VerLanguageNameW
CreateIoCompletionPort
ContinueDebugEvent
GetCalendarInfoA
CompareStringA
ReadConsoleOutputCharacterA
WriteTapemark
WriteConsoleOutputA
SetEnvironmentVariableA
UnhandledExceptionFilter
FatalAppExitW
GetCurrencyFormatA
SystemTimeToTzSpecificLocalTime
TransmitCommChar
GetLocalTime
DeleteFiber
GetCompressedFileSizeW
CancelTimerQueueTimer
FlushFileBuffers
EnumSystemLanguageGroupsA
LocalLock
GetStdHandle
DeleteFileW
WriteConsoleOutputAttribute
HeapCreate
Heap32ListFirst
GetSystemTimeAdjustment
GetQueuedCompletionStatus
SystemTimeToFileTime
GetCurrentConsoleFont
GetCalendarInfoW
GetDevicePowerState
GetFileInformationByHandle
FindResourceA
DisconnectNamedPipe
EnumCalendarInfoA
WriteConsoleOutputCharacterW
GlobalFindAtomA
WaitForSingleObjectEx
CreateDirectoryExW
PulseEvent
SetStdHandle
IsBadHugeWritePtr
QueryDosDeviceW
DnsHostnameToComputerNameW
GetConsoleAliasExesA
GetPrivateProfileStringA
LocalFlags
ResetWriteWatch
GetSystemDirectoryA
SetConsoleTitleA
InterlockedCompareExchange
SetConsoleCtrlHandler
LoadResource
WaitForMultipleObjects
GetThreadTimes
ReadConsoleW
GetPrivateProfileSectionA
InitializeCriticalSection
GetProfileIntW
CreateDirectoryA
FindNextFileW
lstrcpyA
GetConsoleAliasW
GetConsoleWindow
GetDateFormatA
GetProfileStringA
Process32First
CreateTimerQueueTimer
QueryPerformanceFrequency
lstrcmp
SetThreadExecutionState
WritePrivateProfileSectionW
OpenWaitableTimerA
GlobalMemoryStatusEx
SetHandleCount
CloseHandle
ReadConsoleOutputCharacterW
IsBadCodePtr
FormatMessageW
EnumResourceNamesW
GetProfileStringW
GetVolumeNameForVolumeMountPointA
DefineDosDeviceA
SetMessageWaitingIndicator
SetWaitableTimer
IsValidLocale
GetCurrentProcessId
lstrcpy
GetEnvironmentStringsW
GetConsoleTitleW
GetOEMCP
SetInformationJobObject
FindFirstVolumeA
SearchPathW
GetTempPathA
RtlZeroMemory
CompareStringW
QueryInformationJobObject
MoveFileWithProgressW
FlushInstructionCache
Process32FirstW
SetFilePointerEx
GetLocaleInfoW
GetConsoleAliasExesW
ConnectNamedPipe
LocalUnlock
IsBadStringPtrA
GetProcessVersion
IsBadReadPtr
SetCurrentDirectoryW
GetFileSizeEx
GenerateConsoleCtrlEvent
FindFirstFileExA
DeviceIoControl
LockResource
LCMapStringW
GetTimeFormatW
SearchPathA
EnumDateFormatsA
CreateNamedPipeA
GlobalGetAtomNameA
GetConsoleCP
VirtualProtectEx
LoadLibraryExW
GlobalCompact
GetCurrentThreadId
GetSystemDefaultUILanguage
DnsHostnameToComputerNameA
ReadConsoleInputW
SetFileTime
GetConsoleDisplayMode
ReadConsoleInputA
CreateTapePartition
Process32NextW
GetWriteWatch
Beep
SetConsoleOutputCP
CreateHardLinkW
CreateMailslotW
DeleteTimerQueue
CreateRemoteThread
GetThreadContext
FillConsoleOutputAttribute
Heap32ListNext
ExitProcess
FillConsoleOutputCharacterW
WaitForSingleObject
OutputDebugStringA
MapUserPhysicalPagesScatter
GetCurrentDirectoryA
SetComputerNameW
TryEnterCriticalSection
AssignProcessToJobObject
LoadLibraryExA
GetNamedPipeHandleStateA
FindNextFileA
lstrcpynW
VirtualLock
TlsGetValue
CreateMutexW
IsBadWritePtr
lstrcpynA
AddConsoleAliasA
TlsFree
GetEnvironmentStringsA
GetVersionExW
WriteFileGather
GetModuleFileNameA
RemoveDirectoryA
GetComputerNameW
ReadFileEx
lstrlenW
EnumLanguageGroupLocalesW
CreateSemaphoreA
GetConsoleTitleA
GetBinaryTypeW
TransactNamedPipe
GetCommTimeouts
Sleep
UnlockFileEx
UnmapViewOfFile
FindCloseChangeNotification
GetPrivateProfileSectionW
LocalFree
FindAtomW
GetCommandLineA
GetStringTypeExW
GetLargestConsoleWindowSize
OpenProcess
LCMapStringA
HeapCompact

gdi32

OffsetViewportOrgEx
SetViewportExtEx
GetStretchBltMode
SetLayoutWidth
GetCharWidthW
GdiFlush
GetMetaFileA
GdiDllInitialize
GetGlyphOutline
CreateEllipticRgnIndirect
PtVisible
GetClipBox
SetBoundsRect
GetEnhMetaFileBits
SetPolyFillMode
GdiEntry4
EngFindResource
SetMetaFileBitsEx
EngCreateDeviceBitmap
GdiEntry14
GetRegionData
GetMetaFileW
CreateEnhMetaFileA
EngDeletePalette
AddFontResourceExA
GetNearestPaletteIndex
StrokeAndFillPath
SetPixelFormat
CreatePolygonRgn
XFORMOBJ_bApplyXform
CreateRoundRectRgn
GdiEntry5
GdiGetSpoolMessage
GdiEndPageEMF
GdiConsoleTextOut
GetArcDirection
EndDoc
ExtCreatePen
GdiEntry6
PATHOBJ_vEnumStartClipLines
RemoveFontResourceExA
EqualRgn
GdiProcessSetup
CreateScalableFontResourceW
cGetTTFFromFOT
GetCharWidthInfo
PathToRegion
Polygon
GdiCleanCacheDC
PolyPolyline
LPtoDP
SetMagicColors
GdiCreateLocalEnhMetaFile
GetEUDCTimeStampExW
CreateCompatibleBitmap
CLIPOBJ_ppoGetPath
GetPath
SaveDC
FrameRgn
ResetDCA
GdiDeleteLocalDC
GdiGetPageHandle
ExtFloodFill
GetBkColor
EngComputeGlyphSet
GetTextExtentExPointWPri
GetPolyFillMode
GdiGetCodePage
GdiValidateHandle
GetOutlineTextMetricsW
CreateBrushIndirect
GetStringBitmapA
CopyEnhMetaFileA
CancelDC
EngStretchBltROP
EngCheckAbort
IntersectClipRect
GetTextMetricsA
GdiStartDocEMF
CreateEnhMetaFileW
GdiEntry8
GetAspectRatioFilterEx
GetTextExtentPointI
PlgBlt
SetBitmapDimensionEx
PolylineTo
FlattenPath
GetWinMetaFileBits
DeviceCapabilitiesExA
GdiConvertEnhMetaFile
GetColorAdjustment

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74853b7d86b2dc051f12c34e5e19dc68

Code Sign

3a:db:3d:b1:a9:03:4e:45:b8:41:47:0b:ed:13:f0:d1Certificate

Extended Key Usages

5c:94:ef:e9:47:19:64:d9:2e:e7:09:a2:a1:fd:65:ed:5e:88:cc:dcSigner

Headers

File Characteristics

Imports

kernel32

gdi32

Sections

.text Size: 92KB - Virtual size: 91KB

.text4 Size: 1024B - Virtual size: 1000B

.text3 Size: 1024B - Virtual size: 1000B

.text2 Size: 2KB - Virtual size: 1KB

.data Size: 10KB - Virtual size: 9KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 1KB

3a:db:3d:b1:a9:03:4e:45:b8:41:47:0b:ed:13:f0:d1
Certificate

5c:94:ef:e9:47:19:64:d9:2e:e7:09:a2:a1:fd:65:ed:5e:88:cc:dc
Signer

.text
Size: 92KB - Virtual size: 91KB

.text4
Size: 1024B - Virtual size: 1000B

.text3
Size: 1024B - Virtual size: 1000B

.text2
Size: 2KB - Virtual size: 1KB

.data
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB