5a26b1ad2f981bbaa6a606b37e3267e5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5a26b1ad2f981bbaa6a606b37e3267e5_JaffaCakes118
Size

208KB
MD5

5a26b1ad2f981bbaa6a606b37e3267e5
SHA1

c245a42f6a665b975e70e4054da980afb263c4ba
SHA256

d6be2df5e21a03a03768d0932677ecdabbb4b7192606a405bb41edcc69064cd3
SHA512

7f2302cda514131889f2087d4536be5386e31911799542e3f52b039d15c686d1ff5715420f21b243806fb0de00bd67130a42ded79abc04b429e031c141727a3a
SSDEEP

6144:NENNBzSe7TtsRziJ5KOtMw7FsyXtQg+s8pDPoZK:NENNpSampiZtjmyXtQgJ8pDPo

Score

1^/10

Malware Config

Signatures

Files

5a26b1ad2f981bbaa6a606b37e3267e5_JaffaCakes118
.dll windows:5 windows x86 arch:x86

5871c7a87dd21577bcee04ed7f9dc55f

Code Sign

3f:fa:f8:47:7f:bc:c5:7a:bd:e2:18:b5:13:39:23:ba
Certificate

Issuer

CN=UX4KxV2xwdS0

Not Before

12/03/2012, 15:26

Not After

31/12/2039, 23:59

Subject

CN=UX4KxV2xwdS0

Extended Key Usages

ExtKeyUsageCodeSigning

ec:5e:3a:ea:0c:98:0b:76:7b:ef:99:21:59:4d:75:36:02:85:c1:0d
Signer

Actual PE Digest

ec:5e:3a:ea:0c:98:0b:76:7b:ef:99:21:59:4d:75:36:02:85:c1:0d

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CancelTimerQueueTimer
BackupSeek
AddAtomW
lstrcpyW
ConnectNamedPipe
lstrlenA
lstrcpyA
CreateFileA
ExitProcess
CopyFileA
CreateFileW
CreateMutexW
CreateToolhelp32Snapshot
DebugActiveProcess
DebugBreak
DeleteCriticalSection
DisconnectNamedPipe
DnsHostnameToComputerNameW
EnterCriticalSection
EnumDateFormatsA
EnumUILanguagesA
lstrcatW
WaitForSingleObject
WaitForDebugEvent
VirtualProtect
VirtualAllocEx
VerifyVersionInfoW
VerifyVersionInfoA
VerLanguageNameA
UpdateResourceW
TlsGetValue
SuspendThread
SleepEx
SignalObjectAndWait
SetTimerQueueTimer
SetThreadIdealProcessor
SetProcessPriorityBoost
SetFileAttributesA
SetDefaultCommConfigW
VirtualAlloc
SetConsoleMode
SetConsoleCP
SetComputerNameW
SetCommTimeouts
SetCommState
RtlFillMemory
ResetWriteWatch
RequestDeviceWakeup
ReplaceFileA
ReleaseMutex
OpenWaitableTimerA
OpenSemaphoreA
MultiByteToWideChar
Module32NextW
Module32Next
MapViewOfFileEx
LocalReAlloc
LocalLock
LocalHandle
LocalFlags
LoadLibraryExW
LoadLibraryExA
LCMapStringW
IsProcessorFeaturePresent
IsBadReadPtr
IsBadHugeWritePtr
InterlockedCompareExchange
InitAtomTable
HeapWalk
HeapLock
HeapCreate
HeapAlloc
GlobalUnfix
GlobalGetAtomNameA
GlobalFindAtomW
GetVolumePathNameW
GetVolumePathNameA
GetVersionExW
GetUserDefaultLCID
GetTempPathW
GetProcessHeaps
GetProcessHeap
GetPrivateProfileStructW
GetPrivateProfileSectionNamesW
GetPrivateProfileIntA
GetNumberOfConsoleMouseButtons
GetLocaleInfoW
GetEnvironmentVariableW
GetEnvironmentVariableA
GetEnvironmentStringsW
GetDiskFreeSpaceA
GetCurrentConsoleFont
GetConsoleOutputCP
GetCommandLineW
GetCommModemStatus
GetCommMask
FoldStringA
FindResourceExW
FindNextFileW
FindFirstChangeNotificationW
FindFirstChangeNotificationA
FindClose
FindAtomW
GetWindowsDirectoryA
FatalAppExitA

user32

wvsprintfA
mouse_event
keybd_event
WindowFromPoint
WindowFromDC
WINNLSGetIMEHotkey
UnpackDDElParam
TabbedTextOutA
SwitchDesktop
ShowOwnedPopups
ShowCaret
SetWindowRgn
SetWindowPos
SetWinEventHook
SetScrollPos
SetParent
SetForegroundWindow
SetClassLongW
SendMessageTimeoutW
SendMessageA
ScrollWindowEx
ScreenToClient
RemoveMenu
RealGetWindowClassA
RealGetWindowClass
PaintDesktop
NotifyWinEvent
LoadKeyboardLayoutW
LoadKeyboardLayoutA
LoadImageA
LoadBitmapA
IsMenu
IsIconic
IsDialogMessage
IsClipboardFormatAvailable
InvalidateRect
InflateRect
IMPSetIMEW
GetWindowTextLengthW
GetWindowPlacement
GetWindow
GetUserObjectInformationW
GetScrollPos
GetNextDlgTabItem
GetMessageA
GetKeyboardType
GetKeyState
GetKeyNameTextW
GetInputState
GetDlgItemTextW
GetDC
GetCursor
GetClipCursor
GetClassWord
GetClassLongW
GetClassInfoExA
GetCaretBlinkTime
GetCapture
FreeDDElParam
FindWindowExA
ExitWindowsEx
EnumThreadWindows
EnumPropsExA
EnumPropsA
EnumDesktopsW
EnableWindow
DrawTextW
DrawIcon
DrawEdge
DlgDirSelectComboBoxExW
DialogBoxParamW
DialogBoxParamA
DestroyIcon
DestroyCaret
DeferWindowPos
DdeInitializeA
CreateDialogIndirectParamA
CreateCursor
CountClipboardFormats
CopyImage
CopyAcceleratorTableA
CloseWindow
ChildWindowFromPoint
CharPrevW
CharLowerW
CharLowerA
CallMsgFilter
BlockInput
ArrangeIconicWindows
AppendMenuA
AnyPopup
AdjustWindowRect
GetWindowTextA

gdi32

EnumFontsA
EngMultiByteToUnicodeN
EngMarkBandingSurface
EngLockSurface
EngLoadModule
EngGetCurrentCodePage
EngDeleteSurface
EngCreateBitmap
EngComputeGlyphSet
EngAlphaBlend
EndFormPage
Ellipse
DeleteObject
CreatePolyPolygonRgn
CreatePen
CreateFontW
CreateFontA
CreateDiscardableBitmap
CreateDIBPatternBrush
CloseMetaFile
CheckColorsInGamut
CancelDC
CLIPOBJ_cEnumStart
BRUSHOBJ_pvAllocRbrush
EnumObjects
Escape
EudcLoadLinkW
ExtEscape
ExtTextOutA
ExtTextOutW
FONTOBJ_pxoGetXform
GdiAddFontResourceW
GdiAddGlsRecord
GdiConvertToDevmodeW
GdiDeleteLocalDC
GdiDeleteSpoolFileHandle
GdiDllInitialize
GdiEndPageEMF
GdiEntry8
GdiFixUpHandle
GdiGetPageCount
GdiGetSpoolFileHandle
GdiPlayScript
GdiQueryFonts
GdiRealizationInfo
GetBitmapBits
GetBoundsRect
GetBrushOrgEx
GetCharABCWidthsFloatW
GetCharABCWidthsI
GetCharacterPlacementA
GetDCPenColor
GetDeviceGammaRamp
GetEUDCTimeStampExW
GetEnhMetaFileDescriptionA
GetFontData
GetLogColorSpaceW
GetMetaFileBitsEx
GetNearestColor
GetNearestPaletteIndex
GetPixel
GetRelAbs
GetStockObject
GetTextCharsetInfo
GetTextColor
GetTextExtentExPointW
GetTextExtentPoint32A
GetTextExtentPointA
HT_Get8BPPMaskPalette
InvertRgn
MirrorRgn
MoveToEx
OffsetRgn
OffsetViewportOrgEx
OffsetWindowOrgEx
PATHOBJ_vEnumStartClipLines
PathToRegion
Pie
PlayEnhMetaFileRecord
PlgBlt
PolyPatBlt
PolyPolygon
QueryFontAssocStatus
RealizePalette
RemoveFontMemResourceEx
ResizePalette
STROBJ_bEnum
SaveDC
SetGraphicsMode
SetMapMode
SetPaletteEntries
SetROP2
SetTextColor
UnrealizeObject
EngStretchBltROP

comdlg32

ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetFileTitleW
GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
GetSaveFileNameW
PageSetupDlgA
PageSetupDlgW
PrintDlgA
PrintDlgExA
PrintDlgExW
ReplaceTextA
ReplaceTextW
GetOpenFileNameW

advapi32

RegOpenKeyW

Sections

.text
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text3
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5871c7a87dd21577bcee04ed7f9dc55f

Code Sign

3f:fa:f8:47:7f:bc:c5:7a:bd:e2:18:b5:13:39:23:baCertificate

Extended Key Usages

ec:5e:3a:ea:0c:98:0b:76:7b:ef:99:21:59:4d:75:36:02:85:c1:0dSigner

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

Sections

.text Size: 193KB - Virtual size: 192KB

.data Size: 512B - Virtual size: 48B

.text4 Size: 1024B - Virtual size: 1000B

.text3 Size: 3KB - Virtual size: 2KB

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 2KB - Virtual size: 1KB

3f:fa:f8:47:7f:bc:c5:7a:bd:e2:18:b5:13:39:23:ba
Certificate

ec:5e:3a:ea:0c:98:0b:76:7b:ef:99:21:59:4d:75:36:02:85:c1:0d
Signer

.text
Size: 193KB - Virtual size: 192KB

.data
Size: 512B - Virtual size: 48B

.text4
Size: 1024B - Virtual size: 1000B

.text3
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 2KB - Virtual size: 1KB