aa10179773a6f91b7b192d82d2fe1c9c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

aa10179773a6f91b7b192d82d2fe1c9c_JaffaCakes118
Size

251KB
MD5

aa10179773a6f91b7b192d82d2fe1c9c
SHA1

d1f23a6a7a725eb4914eb685143f75a1ec05d3ec
SHA256

2c14fb21d2ce412915a605c6edca0aefc7f40eb089dd26c32dceb7f1e78f1d64
SHA512

904096aeef93c09df24f2850bebbd4b794aed9ed1e4af01da0baab051fa805e31d171fb18db23963ef7e6fa014f6109669f6077d6e365540e0d2a935b9261fed
SSDEEP

6144:7HHY/I2jPMCOK1SVXjxu/i6sfNvvtjvIN9Gn9:7H4TrMCOIyXjxu1sfdvtjve9G9

Score

1^/10

Malware Config

Signatures

Files

aa10179773a6f91b7b192d82d2fe1c9c_JaffaCakes118
.dll windows:5 windows x86 arch:x86

445ecc6de0e04707c8cc6615f1107639

Code Sign

1c:16:36:68:5a:e1:63:ae:45:38:cb:55:83:9c:61:ad
Certificate

Issuer

CN=rhyn5r69im6t7i5

Not Before

17/01/2012, 08:40

Not After

31/12/2039, 23:59

Subject

CN=rhyn5r69im6t7i5

Extended Key Usages

ExtKeyUsageCodeSigning

ae:c6:a1:12:42:d2:8f:ca:ad:1c:d3:f7:30:f4:2b:c9:c3:e6:43:42
Signer

Actual PE Digest

ae:c6:a1:12:42:d2:8f:ca:ad:1c:d3:f7:30:f4:2b:c9:c3:e6:43:42

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
lstrcpyA
lstrlenA
GetWindowsDirectoryA
GetVersion
BackupSeek
CancelIo
CopyFileA
CopyFileW
CreateFileMappingW
CreateIoCompletionPort
CreateSemaphoreW
CreateTapePartition
CreateToolhelp32Snapshot
DeleteFileA
EnumCalendarInfoW
EnumDateFormatsW
EnumResourceTypesA
EnumSystemCodePagesW
EnumSystemLocalesA
EnumTimeFormatsA
EnumUILanguagesA
FatalExit
FileTimeToDosDateTime
FindCloseChangeNotification
FindFirstVolumeMountPointA
FindNextVolumeW
FormatMessageA
GetAtomNameA
GetCompressedFileSizeW
GetComputerNameExW
GetConsoleAliasA
GetConsoleAliasExesLengthA
GetConsoleAliasesW
GetConsoleOutputCP
GetConsoleTitleW
GetDefaultCommConfigW
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetEnvironmentVariableA
GetFileAttributesExA
GetFullPathNameW
GetLocaleInfoA
GetPrivateProfileStringA
GetProcessIoCounters
GetProcessPriorityBoost
GetProcessTimes
GetStdHandle
GetStringTypeExW
ExitProcess
GetSystemPowerStatus
GetTempFileNameW
GetVolumeNameForVolumeMountPointW
GetVolumePathNameW
GlobalDeleteAtom
GlobalFix
GlobalSize
Heap32ListNext
IsBadCodePtr
LocalFileTimeToFileTime
LocalReAlloc
LocalUnlock
LockResource
MoveFileA
MoveFileExW
OpenEventW
OpenThread
QueryInformationJobObject
ReadConsoleInputW
ReplaceFile
ReplaceFileA
ReplaceFileW
ResetEvent
ResumeThread
ScrollConsoleScreenBufferA
SetConsoleCursorPosition
SetConsoleTitleA
SetFileAttributesW
SetLastError
SetProcessAffinityMask
SetSystemTimeAdjustment
SetTapeParameters
SetThreadContext
SetThreadExecutionState
SetupComm
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateThread
TransactNamedPipe
UnhandledExceptionFilter
UnlockFileEx
VerSetConditionMask
WriteProfileSectionW
WriteProfileStringA
_llseek
_lopen
lstrcmpiW
lstrcpy
GetSystemInfo
VirtualAlloc

user32

AttachThreadInput
BeginDeferWindowPos
BeginPaint
CallMsgFilterA
ChangeDisplaySettingsA
CharLowerA
CharToOemA
CheckDlgButton
ChildWindowFromPoint
ClientToScreen
CloseWindowStation
CopyAcceleratorTableW
CountClipboardFormats
CreateIconIndirect
CreateWindowStationW
DdeEnableCallback
DdeFreeStringHandle
DdeQueryNextServer
DefDlgProcA
DefFrameProcW
DialogBoxParamW
DlgDirListA
DrawEdge
DrawTextExA
DrawTextExW
EnumDisplayDevicesA
EnumDisplaySettingsExW
EnumWindowStationsA
FindWindowExW
GetAsyncKeyState
GetClassInfoExW
GetClassInfoW
GetClassLongA
GetClassLongW
GetClassNameA
GetClipboardOwner
GetDlgItemTextA
GetGUIThreadInfo
GetKeyNameTextW
GetKeyboardLayout
GetKeyboardType
GetLastInputInfo
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuInfo
GetParent
GetScrollRange
GetTopWindow
GetWindowLongW
IMPGetIMEW
IMPQueryIMEW
ImpersonateDdeClientWindow
IntersectRect
IsClipboardFormatAvailable
IsDialogMessageW
LoadAcceleratorsW
LoadCursorFromFileA
LoadCursorW
LoadKeyboardLayoutW
MessageBoxIndirectA
MonitorFromWindow
OemToCharA
PackDDElParam
PeekMessageA
RealGetWindowClass
RegisterHotKey
RegisterWindowMessageA
RemoveMenu
ScrollDC
ScrollWindowEx
SendInput
SendMessageA
SetActiveWindow
SetForegroundWindow
SetLayeredWindowAttributes
SetMenu
SetMessageExtraInfo
SetParent
SetWinEventHook
SetWindowContextHelpId
SetWindowPos
SetWindowTextW
ShowCaret
ShowOwnedPopups
SubtractRect
SwitchToThisWindow
SystemParametersInfoA
ToUnicode
UnregisterDeviceNotification
UnregisterHotKey
ValidateRgn
WINNLSEnableIME
wvsprintfA
LoadBitmapA
ArrangeIconicWindows

advapi32

RegOpenKeyExW

ole32

CLSIDFromString
CoAddRefServerProcess
CoBuildVersion
CoCreateFreeThreadedMarshaler
CoCreateGuid
CoFreeUnusedLibraries
CoGetApartmentID
CoGetCallContext
CoGetClassVersion
CoGetInterfaceAndReleaseStream
CoGetMarshalSizeMax
CoInitializeEx
CoIsOle1Class
CoMarshalInterThreadInterfaceInStream
CoQueryReleaseObject
CoRegisterMessageFilter
CoRegisterSurrogateEx
CoRevertToSelf
CoSwitchCallContext
CoTaskMemAlloc
CoTaskMemRealloc
CoTestCancel
CoUnloadingWOW
CoUnmarshalInterface
CreateAntiMoniker
CreateBindCtx
CreateDataCache
CreateFileMoniker
CreateItemMoniker
CreateObjrefMoniker
CreatePointerMoniker
CreateStreamOnHGlobal
DoDragDrop
FmtIdToPropStgName
HACCEL_UserFree
HACCEL_UserMarshal
HACCEL_UserSize
HBITMAP_UserFree
HBRUSH_UserMarshal
HDC_UserMarshal
HENHMETAFILE_UserMarshal
HENHMETAFILE_UserSize
HGLOBAL_UserMarshal
HICON_UserUnmarshal
HMENU_UserMarshal
HMENU_UserSize
HMENU_UserUnmarshal
HMETAFILEPICT_UserMarshal
HPALETTE_UserUnmarshal
HWND_UserSize
HkOleRegisterObject
IsAccelerator
MkParseDisplayName
OleConvertIStorageToOLESTREAM
OleConvertOLESTREAMToIStorage
OleCreate
OleCreateFromData
OleCreateFromFileEx
OleCreateLinkToFile
OleCreateLinkToFileEx
OleGetClipboard
OleInitialize
OleLoad
OleLoadFromStream
OleNoteObjectVisible
OleQueryLinkFromData
OleRegEnumFormatEtc
OleRegEnumVerbs
OleRegGetUserType
OpenOrCreateStream
ReadClassStm
ReadStringStream
RevokeDragDrop
SNB_UserFree
SNB_UserMarshal
SNB_UserSize
STGMEDIUM_UserSize
STGMEDIUM_UserUnmarshal
StgConvertPropertyToVariant
StgOpenStorageEx
StringFromGUID2
UpdateDCOMSettings
UtConvertDvtd16toDvtd32
UtConvertDvtd32toDvtd16
WriteOleStg

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

445ecc6de0e04707c8cc6615f1107639

Code Sign

1c:16:36:68:5a:e1:63:ae:45:38:cb:55:83:9c:61:adCertificate

Extended Key Usages

ae:c6:a1:12:42:d2:8f:ca:ad:1c:d3:f7:30:f4:2b:c9:c3:e6:43:42Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 9KB - Virtual size: 9KB

.text2 Size: 234KB - Virtual size: 234KB

.data Size: 512B - Virtual size: 68B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 1KB

1c:16:36:68:5a:e1:63:ae:45:38:cb:55:83:9c:61:ad
Certificate

ae:c6:a1:12:42:d2:8f:ca:ad:1c:d3:f7:30:f4:2b:c9:c3:e6:43:42
Signer

.text
Size: 9KB - Virtual size: 9KB

.text2
Size: 234KB - Virtual size: 234KB

.data
Size: 512B - Virtual size: 68B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB