688aee0e7f6b52544f082760e963c075_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

688aee0e7f6b52544f082760e963c075_JaffaCakes118
Size

42KB
MD5

688aee0e7f6b52544f082760e963c075
SHA1

d352b606823cd74e3c90ecc53b8d7dd2e23ce56b
SHA256

70e5e2affad3d5f9e1c3526dfcfb02355a1455ade350853e0dc6cce25c9ccd90
SHA512

23f884848563cfd48817d760c86723a02b2ff4b18e7e96e525117f508519b5697eb5e6aea9a71ce4a9da0073fe0c8844db99ad23c410d73622cfec06202e4473
SSDEEP

768:wRJkNxsRLUX+ob9T9XSBN+pzLRuMFtqimhSut9+5M9pZNfU9j/r2spBBBBBBBEv1:3qUXR9T9X6N+J5HVQl9w+HwjD5BBBBBq

Score

1^/10

Malware Config

Signatures

Files

688aee0e7f6b52544f082760e963c075_JaffaCakes118
.dll windows:5 windows x86 arch:x86

1ec01047b898a2c075c87b411b39dcec

Code Sign

59:52:4b:90:0c:c6:56:79:b9:60:98:70:86:d7:5b:4e
Certificate

Issuer

CN=qw34t123tc125c1

Not Before

22/02/2012, 06:51

Not After

31/12/2039, 23:59

Subject

CN=qw34t123tc125c1

Extended Key Usages

ExtKeyUsageCodeSigning

4f:13:ac:e5:df:c4:98:8b:70:e9:9b:c3:57:ff:84:b6:85:64:d1:c4
Signer

Actual PE Digest

4f:13:ac:e5:df:c4:98:8b:70:e9:9b:c3:57:ff:84:b6:85:64:d1:c4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedCompareExchange
GetProcAddress
LoadLibraryA
VirtualAlloc
GetWindowsDirectoryW

user32

DdeInitializeA
DdeQueryConvInfo
DdeQueryStringA
DdeReconnect
DdeSetUserHandle
DdeUnaccessData
DefDlgProcW
DestroyWindow
DialogBoxIndirectParamA
DialogBoxIndirectParamW
DlgDirListA
DlgDirSelectComboBoxExA
DlgDirSelectComboBoxExW
DrawFocusRect
DrawIcon
DrawIconEx
DrawTextW
EnumClipboardFormats
EnumWindows
ExcludeUpdateRgn
FrameRect
GetActiveWindow
GetAltTabInfo
GetAsyncKeyState
GetCaretBlinkTime
GetClassInfoExA
GetClassInfoExW
GetClassLongW
GetClassWord
GetClientRect
GetClipCursor
GetClipboardData
GetClipboardSequenceNumber
GetDC
GetDCEx
GetDesktopWindow
GetDoubleClickTime
GetKeyboardLayoutNameA
GetLastActivePopup
GetLastInputInfo
GetMenuContextHelpId
GetMessageA
GetMessageTime
GetMonitorInfoA
GetProcessDefaultLayout
GetPropW
GetScrollInfo
GetTabbedTextExtentW
GetThreadDesktop
GetWindow
GetWindowLongA
GetWindowModuleFileName
GetWindowModuleFileNameA
GetWindowWord
HiliteMenuItem
DdeFreeDataHandle
InsertMenuA
IsCharAlphaNumericA
IsCharAlphaW
IsClipboardFormatAvailable
IsWindowEnabled
LoadBitmapA
LoadCursorA
LoadCursorFromFileA
LoadKeyboardLayoutA
LoadStringA
MapVirtualKeyExW
MapVirtualKeyW
MenuItemFromPoint
MonitorFromPoint
NotifyWinEvent
OemToCharA
OemToCharBuffW
OpenDesktopA
OpenWindowStationW
PackDDElParam
PeekMessageA
PostThreadMessageW
RealGetWindowClassW
RegisterDeviceNotificationA
RegisterShellHookWindow
RegisterWindowMessageA
ReleaseCapture
ScreenToClient
ScrollDC
ScrollWindow
SendMessageCallbackA
SendMessageTimeoutW
SetActiveWindow
SetCaretBlinkTime
SetDoubleClickTime
SetLastErrorEx
SetMenuContextHelpId
SetPropA
SetUserObjectSecurity
SetWindowContextHelpId
SetWindowRgn
SetWindowTextA
SetWindowsHookA
SetWindowsHookExA
SwapMouseButton
TrackPopupMenuEx
TranslateAcceleratorW
TranslateMDISysAccel
UnpackDDElParam
UpdateLayeredWindow
UpdateWindow
VkKeyScanExA
WINNLSEnableIME
WINNLSGetEnableStatus
WaitMessage
WindowFromDC
WindowFromPoint
keybd_event
wsprintfA
wvsprintfA
DdeAddData
CreateDialogParamA
CreateDialogIndirectParamW
CreateCursor
CreateCaret
CountClipboardFormats
CopyAcceleratorTableA
CloseWindowStation
CheckMenuItem
CharUpperBuffA
CharToOemBuffW
CharNextW
CharLowerBuffA
ChangeDisplaySettingsExA
CallWindowProcW
CallMsgFilterA
BringWindowToTop
BeginDeferWindowPos
ArrangeIconicWindows
AppendMenuW
AdjustWindowRectEx
InSendMessageEx

comdlg32

ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW
GetFileTitleA
FindTextW
ChooseColorA

ole32

BindMoniker
CLIPFORMAT_UserMarshal
CLIPFORMAT_UserSize
CLSIDFromProgID
CLSIDFromProgIDEx
CLSIDFromString
CoAllowSetForegroundWindow
CoBuildVersion
CoCopyProxy
CoCreateInstance
CoCreateObjectInContext
CoFileTimeNow
CoFreeUnusedLibraries
CoGetClassObject
CoGetCurrentProcess
CoGetInstanceFromIStorage
CoGetMalloc
CoGetMarshalSizeMax
CoGetObjectContext
CoInitialize
CoIsOle1Class
CoQueryProxyBlanket
CoQueryReleaseObject
CoRegisterChannelHook
CoRegisterClassObject
CoRegisterMallocSpy
CoRegisterMessageFilter
CoRegisterPSClsid
CoRegisterSurrogateEx
CoReleaseMarshalData
CoRevertToSelf
CoRevokeMallocSpy
CoSetCancelObject
CoTaskMemAlloc
CoUninitialize
CoUnloadingWOW
CoWaitForMultipleHandles
CreateAntiMoniker
CreateClassMoniker
CreateGenericComposite
CreateItemMoniker
CreateOleAdviseHolder
CreateStdProgressIndicator
DcomChannelSetHResult
DllDebugObjectRPCHook
FmtIdToPropStgName
FreePropVariantArray
GetClassFile
GetConvertStg
GetDocumentBitStg
HACCEL_UserFree
HACCEL_UserMarshal
HBITMAP_UserSize
HBITMAP_UserUnmarshal
HBRUSH_UserUnmarshal
HDC_UserMarshal
HDC_UserUnmarshal
HENHMETAFILE_UserFree
HENHMETAFILE_UserUnmarshal
HGLOBAL_UserFree
HGLOBAL_UserMarshal
HGLOBAL_UserSize
HICON_UserFree
HICON_UserMarshal
HMENU_UserFree
HMENU_UserUnmarshal
HMETAFILEPICT_UserUnmarshal
HMETAFILE_UserFree
HMETAFILE_UserMarshal
HWND_UserFree
HWND_UserUnmarshal
HkOleRegisterObject
IIDFromString
MkParseDisplayName
MonikerRelativePathTo
OleBuildVersion
OleConvertIStorageToOLESTREAM
OleCreateDefaultHandler
OleCreateEmbeddingHelper
OleCreateEx
OleCreateFromDataEx
OleCreateLink
OleCreateLinkEx
OleCreateLinkToFile
OleCreateMenuDescriptor
OleCreateStaticFromData
OleFlushClipboard
OleGetAutoConvert
OleGetIconOfFile
OleInitializeWOW
OleIsCurrentClipboard
OleLoad
OleLockRunning
OleNoteObjectVisible
OleRegGetUserType
OleRun
OleSaveToStream
OleSetAutoConvert
OleSetContainedObject
OleSetMenuDescriptor
OleUninitialize
OpenOrCreateStream
ReadClassStm
ReadFmtUserTypeStg
ReadOleStg
SNB_UserFree
SNB_UserMarshal
SNB_UserSize
STGMEDIUM_UserMarshal
SetConvertStg
SetDocumentBitStg
StgCreateDocfileOnILockBytes
StgCreatePropStg
StgCreateStorageEx
StgGetIFillLockBytesOnILockBytes
StgIsStorageFile
StgOpenStorageOnILockBytes
UtGetDvtd32Info
WdtpInterfacePointer_UserUnmarshal
WriteOleStg
WriteStringStream

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text6
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text5
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ec01047b898a2c075c87b411b39dcec

Code Sign

59:52:4b:90:0c:c6:56:79:b9:60:98:70:86:d7:5b:4eCertificate

Extended Key Usages

4f:13:ac:e5:df:c4:98:8b:70:e9:9b:c3:57:ff:84:b6:85:64:d1:c4Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

ole32

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 616B

.text6 Size: 2KB - Virtual size: 1KB

.text1 Size: 1024B - Virtual size: 1000B

.text2 Size: 1024B - Virtual size: 1000B

.text5 Size: 19KB - Virtual size: 19KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 1KB

59:52:4b:90:0c:c6:56:79:b9:60:98:70:86:d7:5b:4e
Certificate

4f:13:ac:e5:df:c4:98:8b:70:e9:9b:c3:57:ff:84:b6:85:64:d1:c4
Signer

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 616B

.text6
Size: 2KB - Virtual size: 1KB

.text1
Size: 1024B - Virtual size: 1000B

.text2
Size: 1024B - Virtual size: 1000B

.text5
Size: 19KB - Virtual size: 19KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB