42c9ac59b5da293effe3d83be091030b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

42c9ac59b5da293effe3d83be091030b_JaffaCakes118
Size

132KB
MD5

42c9ac59b5da293effe3d83be091030b
SHA1

385f418ddd2a30c2c36da9020b5b2fed13b6a26d
SHA256

c566a7e41281de1cbb6c241a2fd2e4878faa479f066bf166e32b782b5cd65365
SHA512

456ba78f305c6a480cfeb27faa51a4e0e47c6b95a70a89726b207eae80f775fa5b2bc5126c227c2bafe8dd02a46be01a147a8566f4de4123be36a2497aa8ccd7
SSDEEP

3072:d9X9s2BfxAAXrRt8x6o7Piv2Piv2Piv2Piv5:z9sSJt2pppE

Score

1^/10

Malware Config

Signatures

Files

42c9ac59b5da293effe3d83be091030b_JaffaCakes118
.dll windows:5 windows x86 arch:x86

38048b0cb9be073b4a03e8f744642a97

Code Sign

73:c2:e8:4a:e6:53:2c:94:4e:85:92:3a:67:87:27:6a
Certificate

Issuer

CN=evtwetvbqwe45vb2

Not Before

01/03/2012, 08:06

Not After

31/12/2039, 23:59

Subject

CN=evtwetvbqwe45vb2

Extended Key Usages

ExtKeyUsageCodeSigning

57:49:fc:88:27:8c:70:04:db:a2:95:ae:8b:b8:59:5c:78:e8:82:b1
Signer

Actual PE Digest

57:49:fc:88:27:8c:70:04:db:a2:95:ae:8b:b8:59:5c:78:e8:82:b1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
GetProcAddress
LoadLibraryA
InterlockedCompareExchange

user32

DdeEnableCallback
DdeInitializeA
DefWindowProcA
DeleteMenu
DestroyMenu
DialogBoxIndirectParamA
DlgDirListW
DrawTextExA
EndDeferWindowPos
EnumDesktopsA
EnumDisplaySettingsW
EnumPropsExA
EnumPropsExW
EnumWindowStationsA
FreeDDElParam
GetAltTabInfo
GetClassInfoExA
GetClassInfoExW
GetClassWord
GetDCEx
GetDesktopWindow
GetDlgItemInt
GetIconInfo
GetMenuStringA
GetMessageExtraInfo
GetScrollInfo
GetTabbedTextExtentA
GetUserObjectInformationA
GetWindow
InSendMessageEx
InternalGetWindowText
InvalidateRect
InvertRect
IsCharAlphaNumericA
IsDialogMessage
IsWindowVisible
KillTimer
LoadAcceleratorsA
LoadImageW
LoadMenuIndirectW
MenuItemFromPoint
MessageBoxIndirectA
MsgWaitForMultipleObjectsEx
OpenWindowStationW
PostQuitMessage
PtInRect
RegisterDeviceNotificationA
RemovePropA
RemovePropW
SendInput
SendNotifyMessageA
SetCapture
SetClipboardViewer
SetLastErrorEx
SetMessageExtraInfo
SetWindowContextHelpId
SetWindowLongA
SetWindowWord
SetWindowsHookExW
SubtractRect
ToAscii
TranslateMDISysAccel
UnhookWindowsHook
UnionRect
UnregisterClassW
VkKeyScanA
WinHelpA
WindowFromPoint
wvsprintfA
DdeCmpStringHandles
CreateIconIndirect
CreateIcon
CreateDialogParamW
CreateDialogIndirectParamW
CreateAcceleratorTableW
CopyAcceleratorTableW
CloseWindowStation
CheckRadioButton
CheckMenuItem
CharUpperBuffW
CharLowerBuffW
CharLowerBuffA
CharLowerA
ChangeMenuW
ChangeDisplaySettingsA
CallMsgFilterA
BlockInput
BeginPaint
AdjustWindowRectEx
ActivateKeyboardLayout

comdlg32

ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetFileTitleW
GetOpenFileNameW
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
ChooseColorA

ole32

CLIPFORMAT_UserSize
CLSIDFromString
CoAddRefServerProcess
CoCancelCall
CoCreateGuid
CoDeactivateObject
CoFileTimeToDosDateTime
CoFreeLibrary
CoFreeUnusedLibraries
CoGetClassObject
CoGetStdMarshalEx
CoInitializeSecurity
CoMarshalInterThreadInterfaceInStream
CoQueryAuthenticationServices
CoQueryClientBlanket
CoReactivateObject
CoRegisterPSClsid
CoRegisterSurrogate
CoRegisterSurrogateEx
CoReleaseMarshalData
CoRevertToSelf
CoRevokeClassObject
CoSetProxyBlanket
CoSuspendClassObjects
CoTaskMemAlloc
CoTaskMemRealloc
CoTreatAsClass
CreateBindCtx
CreateOleAdviseHolder
DllGetClassObjectWOW
DoDragDrop
FreePropVariantArray
GetClassFile
GetConvertStg
GetHookInterface
HACCEL_UserMarshal
HACCEL_UserUnmarshal
HBITMAP_UserMarshal
HBITMAP_UserUnmarshal
HBRUSH_UserFree
HBRUSH_UserMarshal
HBRUSH_UserSize
HDC_UserSize
HENHMETAFILE_UserFree
HENHMETAFILE_UserMarshal
HGLOBAL_UserMarshal
HMENU_UserUnmarshal
HMETAFILEPICT_UserMarshal
HMETAFILE_UserFree
HPALETTE_UserMarshal
HWND_UserSize
IsAccelerator
OleConvertIStorageToOLESTREAMEx
OleCreateDefaultHandler
OleCreateFromFileEx
OleCreateLinkEx
OleCreateLinkFromDataEx
OleGetAutoConvert
OleGetIconOfFile
OleQueryCreateFromData
OleRun
OleSetClipboard
OleUninitialize
ProgIDFromCLSID
PropStgNameToFmtId
ReadStringStream
SNB_UserSize
STGMEDIUM_UserFree
SetDocumentBitStg
StgCreatePropStg
StgCreateStorageEx
StgOpenAsyncDocfileOnIFillLockBytes
StgOpenStorageEx
StgSetTimes
WdtpInterfacePointer_UserFree
WdtpInterfacePointer_UserSize
WdtpInterfacePointer_UserUnmarshal
WriteClassStm
WriteOleStg
WriteStringStream

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38048b0cb9be073b4a03e8f744642a97

Code Sign

73:c2:e8:4a:e6:53:2c:94:4e:85:92:3a:67:87:27:6aCertificate

Extended Key Usages

57:49:fc:88:27:8c:70:04:db:a2:95:ae:8b:b8:59:5c:78:e8:82:b1Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

ole32

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 616B

.text Size: 19KB - Virtual size: 19KB

.rsrc Size: 98KB - Virtual size: 98KB

.reloc Size: 2KB - Virtual size: 1KB

73:c2:e8:4a:e6:53:2c:94:4e:85:92:3a:67:87:27:6a
Certificate

57:49:fc:88:27:8c:70:04:db:a2:95:ae:8b:b8:59:5c:78:e8:82:b1
Signer

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 616B

.text
Size: 19KB - Virtual size: 19KB

.rsrc
Size: 98KB - Virtual size: 98KB

.reloc
Size: 2KB - Virtual size: 1KB