8601d17cfb26617431ae535c2794558d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8601d17cfb26617431ae535c2794558d_JaffaCakes118
Size

171KB
MD5

8601d17cfb26617431ae535c2794558d
SHA1

7c858a6a5f82994f8d26b63aaf7f393a1ba9f341
SHA256

352969e1865a81660f337920337dff5c3ce4b416c2dd064b0f78c472ea24f98c
SHA512

dfcd92f99edfcd155476d76e8058a42ea34f01cb6e5a52e22cb27000870ac63a5bcf65a59b7056acdf1a627a5e02c04497232059e49d2dca5e266071716b06ef
SSDEEP

3072:x0cbIc2k7Gj9O+eGJ3k5nEVkPa5kifA45GkTlUyctG7zB/yad:xpEc2kYOWckkyhGWlZcqztFd

Score

1^/10

Malware Config

Signatures

Files

8601d17cfb26617431ae535c2794558d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

929ebce196ba54f4b5beea260eb08c24

Code Sign

40:63:aa:a3:eb:98:8e:6e:b2:9a:f7:9e:a0:c1:93:33
Certificate

Issuer

CN=erqwerqwert23623

Not Before

05/03/2012, 06:09

Not After

31/12/2039, 23:59

Subject

CN=erqwerqwert23623

Extended Key Usages

ExtKeyUsageCodeSigning

54:df:61:61:0f:69:33:35:7e:25:9a:d0:00:8f:d6:e6:09:75:2c:c1
Signer

Actual PE Digest

54:df:61:61:0f:69:33:35:7e:25:9a:d0:00:8f:d6:e6:09:75:2c:c1

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
GetCommState
lstrcpyA
lstrlenA
GetWindowsDirectoryA
LoadLibraryA
GetProcAddress
CreateFileA
VirtualAlloc

user32

AnyPopup
AppendMenuA
ArrangeIconicWindows
ChangeDisplaySettingsExA
ChangeDisplaySettingsExW
ChangeDisplaySettingsW
CharUpperA
ChildWindowFromPointEx
ClipCursor
CreateDialogIndirectParamA
CreateMenu
CreatePopupMenu
DdeAddData
DdeConnectList
DdeGetData
DefMDIChildProcW
DefWindowProcA
DeregisterShellHookWindow
DialogBoxIndirectParamW
DlgDirSelectComboBoxExA
DragObject
DrawAnimatedRects
DrawCaption
DrawFrame
DrawMenuBar
DrawStateW
DrawTextA
DrawTextW
EnableMenuItem
EndMenu
EndPaint
EnumDisplaySettingsA
EnumDisplaySettingsW
EnumPropsExW
FlashWindowEx
FreeDDElParam
GetAncestor
GetClassLongW
GetClassNameW
GetClipboardSequenceNumber
GetClipboardViewer
GetDCEx
GetDlgItemInt
GetKeyNameTextW
GetKeyboardState
GetMenuItemInfoA
GetMenuStringA
GetScrollBarInfo
GetTitleBarInfo
GetWindowRect
GetWindowTextW
GetWindowWord
HiliteMenuItem
InSendMessage
InSendMessageEx
InsertMenuItemA
InvalidateRect
IsCharAlphaA
IsCharUpperA
IsClipboardFormatAvailable
LoadBitmapW
LoadMenuIndirectW
LockSetForegroundWindow
LookupIconIdFromDirectory
MessageBoxExW
MoveWindow
OemToCharBuffA
OpenIcon
PostQuitMessage
RealGetWindowClass
RegisterWindowMessageA
RemovePropW
ScrollDC
SendNotifyMessageW
SetCapture
SetClipboardData
SetCursorPos
SetDebugErrorLevel
SetDeskWallpaper
SetDlgItemInt
SetDlgItemTextA
SetDoubleClickTime
SetMenuInfo
SetProcessDefaultLayout
SetProcessWindowStation
SetPropA
SetShellWindow
SetUserObjectInformationA
SetWindowContextHelpId
SetWindowsHookExW
ShowOwnedPopups
SwapMouseButton
ToUnicodeEx
UnregisterDeviceNotification

ole32

CLSIDFromProgIDEx
CoAddRefServerProcess
CoBuildVersion
CoDeactivateObject
CoDisableCallCancellation
CoEnableCallCancellation
CoFileTimeNow
CoFreeAllLibraries
CoFreeUnusedLibraries
CoGetClassObject
CoGetInstanceFromIStorage
CoGetInterfaceAndReleaseStream
CoGetStdMarshalEx
CoGetTreatAsClass
CoInitializeEx
CoInitializeSecurity
CoMarshalHresult
CoQueryAuthenticationServices
CoQueryReleaseObject
CoReactivateObject
CoRegisterClassObject
CoRegisterPSClsid
CoRegisterSurrogateEx
CoResumeClassObjects
CoRevokeClassObject
CoRevokeMallocSpy
CoSetCancelObject
CoSetProxyBlanket
CoTaskMemFree
CreateBindCtx
CreateDataAdviseHolder
CreateFileMoniker
CreateGenericComposite
CreateItemMoniker
DcomChannelSetHResult
DllDebugObjectRPCHook
DllGetClassObjectWOW
GetHGlobalFromStream
HBRUSH_UserFree
HDC_UserMarshal
HENHMETAFILE_UserFree
HGLOBAL_UserUnmarshal
HICON_UserMarshal
HMETAFILEPICT_UserFree
HMETAFILEPICT_UserMarshal
HMETAFILE_UserFree
HMETAFILE_UserMarshal
HWND_UserSize
IsAccelerator
MkParseDisplayName
MonikerRelativePathTo
OleConvertOLESTREAMToIStorageEx
OleCreateFromFile
OleCreateLink
OleCreateLinkFromDataEx
OleCreateLinkToFileEx
OleCreateMenuDescriptor
OleCreateStaticFromData
OleGetClipboard
OleIsRunning
OleLockRunning
OleNoteObjectVisible
OleRegEnumVerbs
OleRegGetUserType
OleSave
OleSetContainedObject
OleSetMenuDescriptor
PropVariantCopy
ReadClassStm
ReadOleStg
SNB_UserMarshal
STGMEDIUM_UserMarshal
StgCreateDocfile
StgCreateDocfileOnILockBytes
StgIsStorageFile
StgOpenPropStg
StringFromGUID2
StringFromIID
UtConvertDvtd32toDvtd16
UtGetDvtd16Info
UtGetDvtd32Info
WriteStringStream

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

929ebce196ba54f4b5beea260eb08c24

Code Sign

40:63:aa:a3:eb:98:8e:6e:b2:9a:f7:9e:a0:c1:93:33Certificate

Extended Key Usages

54:df:61:61:0f:69:33:35:7e:25:9a:d0:00:8f:d6:e6:09:75:2c:c1Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

Sections

.text Size: 9KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 980B

.text Size: 156KB - Virtual size: 156KB

.text2 Size: 1024B - Virtual size: 800B

.reloc Size: 2KB - Virtual size: 1KB

40:63:aa:a3:eb:98:8e:6e:b2:9a:f7:9e:a0:c1:93:33
Certificate

54:df:61:61:0f:69:33:35:7e:25:9a:d0:00:8f:d6:e6:09:75:2c:c1
Signer

.text
Size: 9KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 980B

.text
Size: 156KB - Virtual size: 156KB

.text2
Size: 1024B - Virtual size: 800B

.reloc
Size: 2KB - Virtual size: 1KB