8bffd75e309d392c660863c1487f7285_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8bffd75e309d392c660863c1487f7285_JaffaCakes118
Size

51KB
MD5

8bffd75e309d392c660863c1487f7285
SHA1

b7125c27b34adbf4a33b23ca908ec34c946f3d19
SHA256

eb354d934ab76676a9c1ad9726e63095a628ef9243379a3b6b942717709dfb29
SHA512

448f68ffa3d1bf9a307718c9f585ea0698dd190ac65d69232a7a182e445dc47feda807486d133f05d2e1f9d52fc3022ff7a1b761c32c4658404301015db3414c
SSDEEP

768:r+iguUB3c9vFIWyNHJFLm/WhRAMOiEssO+wcSDPnGMEanWdfr4:aY/9vF+va+HbOiKGDvlEgWdD4

Score

1^/10

Malware Config

Signatures

Files

8bffd75e309d392c660863c1487f7285_JaffaCakes118
.dll windows:5 windows x86 arch:x86

fbce3773a1f8ae211a8c4b2d666c7a7b

Code Sign

38:06:65:05:5d:a1:a8:bf:46:d4:2d:ba:b2:18:b6:5a
Certificate

Issuer

CN=234g634gh3

Not Before

26/02/2012, 06:07

Not After

31/12/2039, 23:59

Subject

CN=234g634gh3

Extended Key Usages

ExtKeyUsageCodeSigning

79:72:43:86:2f:9d:dc:16:e6:06:ef:a3:c6:7a:76:41:56:f2:8a:8a
Signer

Actual PE Digest

79:72:43:86:2f:9d:dc:16:e6:06:ef:a3:c6:7a:76:41:56:f2:8a:8a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
GetProcAddress
LoadLibraryA
InterlockedCompareExchange

user32

DragObject
DrawCaption
DrawIcon
DrawTextExA
EditWndProc
EndTask
EnumDisplayMonitors
EnumDisplaySettingsA
EnumDisplaySettingsExW
EnumDisplaySettingsW
ExcludeUpdateRgn
FillRect
FindWindowA
GetActiveWindow
GetAncestor
GetAsyncKeyState
GetClassInfoExA
GetClipboardSequenceNumber
GetDoubleClickTime
GetFocus
GetGUIThreadInfo
GetKBCodePage
GetMenuContextHelpId
GetMenuDefaultItem
GetMenuItemID
GetMenuItemInfoW
GetMenuItemRect
GetMenuStringW
GetMonitorInfoA
GetScrollInfo
GetWindow
GetWindowInfo
GetWindowModuleFileName
GetWindowModuleFileNameW
GetWindowThreadProcessId
InSendMessage
InsertMenuA
InternalGetWindowText
IsCharAlphaNumericW
IsIconic
IsMenu
IsWindow
IsWindowEnabled
IsZoomed
LoadBitmapW
LoadCursorFromFileA
MessageBoxIndirectA
MessageBoxIndirectW
ModifyMenuA
MonitorFromWindow
OemKeyScan
OpenDesktopA
PackDDElParam
PeekMessageA
PostMessageW
RegisterClassExA
RegisterDeviceNotificationA
RemovePropA
ScreenToClient
SendMessageW
SetClassLongA
SetCursorPos
SetDlgItemInt
SetMenuItemInfoW
SetWindowTextW
SwapMouseButton
SystemParametersInfoW
UnpackDDElParam
UserHandleGrantAccess
VkKeyScanA
WinHelpW
wsprintfW
wvsprintfW
DispatchMessageA
DialogBoxIndirectParamW
DialogBoxIndirectParamA
DestroyMenu
DefFrameProcA
DdeSetQualityOfService
DdeQueryStringW
DdeKeepStringHandle
CreateWindowStationW
CreateWindowStationA
CreateDialogParamW
CreateCaret
CopyImage
CopyAcceleratorTableW
ChildWindowFromPointEx
CheckDlgButton
CharUpperBuffW
CharToOemBuffA
CharNextW
CallMsgFilter
AttachThreadInput

comdlg32

ChooseColorA
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
GetFileTitleA
GetFileTitleW
GetOpenFileNameA
GetOpenFileNameW
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
ChooseColorW

ole32

BindMoniker
CLIPFORMAT_UserMarshal
CLIPFORMAT_UserSize
CLSIDFromProgIDEx
CoCancelCall
CoCreateInstance
CoFileTimeToDosDateTime
CoGetCallerTID
CoGetCurrentLogicalThreadId
CoGetInterfaceAndReleaseStream
CoGetObjectContext
CoGetStdMarshalEx
CoInitialize
CoLoadLibrary
CoRegisterPSClsid
CoRegisterSurrogate
CoResumeClassObjects
CoRevertToSelf
CoRevokeMallocSpy
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoTestCancel
CoTreatAsClass
CoUninitialize
CoUnmarshalInterface
CoWaitForMultipleHandles
CreateItemMoniker
CreateStdProgressIndicator
EnableHookObject
GetConvertStg
GetDocumentBitStg
GetHGlobalFromStream
GetHookInterface
HACCEL_UserMarshal
HBITMAP_UserUnmarshal
HBRUSH_UserSize
HDC_UserUnmarshal
HENHMETAFILE_UserSize
HGLOBAL_UserFree
HMENU_UserMarshal
HMENU_UserUnmarshal
HPALETTE_UserFree
HPALETTE_UserMarshal
HPALETTE_UserSize
HPALETTE_UserUnmarshal
HWND_UserUnmarshal
IsAccelerator
OleConvertIStorageToOLESTREAMEx
OleCreateEx
OleCreateFromData
OleCreateLink
OleCreateLinkEx
OleCreateStaticFromData
OleDraw
OleGetClipboard
OleGetIconOfClass
OleInitialize
OleLockRunning
OleRegEnumFormatEtc
OleRegEnumVerbs
OleRun
OleSetAutoConvert
OleSetClipboard
OleUninitialize
ProgIDFromCLSID
PropVariantCopy
ReadClassStg
ReadFmtUserTypeStg
RevokeDragDrop
SetDocumentBitStg
StgConvertVariantToProperty
StgCreateDocfile
StgCreatePropStg
StgCreateStorageEx
StgOpenAsyncDocfileOnIFillLockBytes
StgOpenStorage
StgOpenStorageOnILockBytes
StgPropertyLengthAsVariant
StringFromCLSID
StringFromIID
WriteClassStm
WriteFmtUserTypeStg

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbce3773a1f8ae211a8c4b2d666c7a7b

Code Sign

38:06:65:05:5d:a1:a8:bf:46:d4:2d:ba:b2:18:b6:5aCertificate

Extended Key Usages

79:72:43:86:2f:9d:dc:16:e6:06:ef:a3:c6:7a:76:41:56:f2:8a:8aSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

ole32

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 648B

.text Size: 18KB - Virtual size: 18KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 1KB - Virtual size: 1KB

38:06:65:05:5d:a1:a8:bf:46:d4:2d:ba:b2:18:b6:5a
Certificate

79:72:43:86:2f:9d:dc:16:e6:06:ef:a3:c6:7a:76:41:56:f2:8a:8a
Signer

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 648B

.text
Size: 18KB - Virtual size: 18KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 1KB - Virtual size: 1KB