aa9d35924d06c18b0ed0a32cab8ec6b7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

aa9d35924d06c18b0ed0a32cab8ec6b7_JaffaCakes118
Size

452KB
MD5

aa9d35924d06c18b0ed0a32cab8ec6b7
SHA1

7e87a21ee94016a063be03d7a357d5620d7c9517
SHA256

91d8b8091fdb3dc8513e91003d6923c7c4015ff9384e03906bf995e96dbc6e22
SHA512

ff3f5848ad26f23e4752bcb65cca5cf83a247a93f473b5bd1357eb0f023aca12c403a3ac50f4652cc1fde9589c3c81803f42abfed20c510bf414642487a92292
SSDEEP

6144:y/SsNizBr4GsXsK4gNHZ+yJLLN/1pYvGwpTyNhUJu:MOSr4gFZ9J1/13+TUUc

Score

1^/10

Malware Config

Signatures

Files

aa9d35924d06c18b0ed0a32cab8ec6b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee759f05583cf3359ce399e0b183a965

Code Sign

0d:a5:60:5d:fc:28:3a:4e:bf:01:ac:f4:c2:87:59:ae
Certificate

Issuer

CN=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 qvg48q7gtk

Not Before

07/12/2012, 07:43

Not After

31/12/2039, 23:59

Subject

CN=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 qvg48q7gtk

Extended Key Usages

ExtKeyUsageCodeSigning

44:a7:ff:30:40:db:ef:00:10:c7:f2:03:cc:f7:f4:b1:a5:e2:4d:a7
Signer

Actual PE Digest

44:a7:ff:30:40:db:ef:00:10:c7:f2:03:cc:f7:f4:b1:a5:e2:4d:a7

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
GetStartupInfoA
GetModuleHandleA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
IsValidLocale
LoadLibraryA
GetCurrentProcessId
GetUserDefaultLCID
lstrcpynA
GetCurrentDirectoryW
GetWindowsDirectoryW
SetCurrentDirectoryW
GetDateFormatW
GetTimeFormatW
GetSystemTimeAsFileTime
GetLocalTime
SystemTimeToFileTime
ExpandEnvironmentStringsW
FindFirstFileW
GetTempPathW
GetTempFileNameW
GetModuleFileNameW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
FormatMessageW
GetSystemDefaultUILanguage
GlobalMemoryStatus
CreateDirectoryW
GlobalFree
GetFileAttributesW
MulDiv
CreateEventA
SetUnhandledExceptionFilter
GetCommandLineW
GetModuleHandleW
WideCharToMultiByte
VirtualFree
GetTempFileNameA
GetWindowsDirectoryA
FileTimeToSystemTime
ExpandEnvironmentStringsA
SearchPathA
GetTempPathA
GetFileAttributesA
CopyFileA
CreateFileA
DeleteFileA
CompareFileTime
CompareStringA
GetLocaleInfoW
FormatMessageA
GetSystemTime
IsBadStringPtrA
IsBadStringPtrW
IsBadWritePtr
ResumeThread
TerminateThread
WaitForMultipleObjects
GetSystemDefaultLCID
lstrcpyW
SetLastError
FlushInstructionCache
lstrcmpiA
lstrcmpA
SetFilePointer
MoveFileExW
SetErrorMode
CreateFileMappingA
CreateMutexA
DuplicateHandle
CreateProcessW
ReleaseMutex
GlobalLock
GlobalUnlock
VirtualQuery
GetSystemInfo
GetVersion
VirtualProtect
FindClose
MoveFileW
LocalAlloc
IsDBCSLeadByteEx
GlobalAlloc
SetThreadLocale
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
LocalFree
OpenEventW
SetEvent
ResetEvent
DeleteFileW
CompareStringW
WriteFile
ReadFile
lstrcpynW
lstrcmpW
lstrlenW
lstrcmpiW
CreateFileW
GetLastError
GetFileSize
MultiByteToWideChar
LoadLibraryW
GetProcAddress
FreeLibrary
GetTickCount
lstrlenA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
Sleep
CreateEventW
CreateThread
InterlockedDecrement
InterlockedIncrement
WaitForSingleObject
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThread
FindResourceA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
RaiseException
GetVersionExW

user32

BeginPaint
GetClientRect
EndPaint
PostQuitMessage
DefWindowProcA
CreateWindowExW
CharUpperA
GetClassInfoExA
RegisterClassExA
CreateWindowExA
LoadMenuW
GetDlgItemInt
SetDlgItemInt
CheckRadioButton
LoadIconW
CheckDlgButton
LoadBitmapW
CreateDialogParamW
GetWindowLongA
SetWindowLongA
IsDlgButtonChecked
CloseWindow
GetDlgCtrlID
DrawEdge
GetLastActivePopup
GetAsyncKeyState
GetScrollInfo
CreateAcceleratorTableW
CharNextW
GetClassNameW
DestroyAcceleratorTable
InvalidateRgn
SetCapture
GetWindowTextW
SetWindowTextW
SetDlgItemTextW
ScreenToClient
LoadStringA
ModifyMenuW
SetCursorPos
MessageBoxW
IsDialogMessageW
MessageBeep
SetWindowPos
SetRectEmpty
CreatePopupMenu
BeginDeferWindowPos
EndDeferWindowPos
LoadBitmapA
RegisterClassW
RegisterWindowMessageW
GetDoubleClickTime
SetMenuDefaultItem
MoveWindow
GetForegroundWindow
TrackPopupMenuEx
DestroyIcon
LoadImageA
TrackPopupMenu
GetSysColor
DrawTextW
GetSystemMetrics
SetParent
LoadIconA
LoadMenuA
SetMenu
SetWindowPlacement
UpdateWindow
AdjustWindowRect
LoadCursorA
SetCursor
RedrawWindow
DialogBoxParamW
GetDlgItemTextW
GetDlgItem
EndDialog
EnableWindow
SendMessageW
GetKeyState
GetFocus
GetNextDlgTabItem
CheckMenuItem
GetMenuItemID
GetMenuItemCount
EnableMenuItem
RemoveMenu
InsertMenuItemW
CheckMenuRadioItem
DeleteMenu
SetMenuItemInfoW
GetCursorPos
GetMenu
GetSubMenu
IsMenu
GetMenuItemInfoW
DestroyMenu
GetParent
FindWindowExW
GetWindowRect
DrawAnimatedRects
IsZoomed
IsWindow
ShowWindow
IsWindowVisible
GetWindowPlacement
SetPropA
GetPropA
CallWindowProcW
RemovePropA
SetForegroundWindow
InvalidateRect
GetSysColorBrush
FillRect
GetDC
ReleaseDC
SetFocus
OpenInputDesktop
GetUserObjectInformationW
CloseDesktop
FindWindowW
CharPrevW
GetClassInfoExW
RegisterClassExW
ReleaseCapture
DestroyWindow
DefWindowProcW
LoadStringW
GetWindowLongW
SetWindowLongW
KillTimer
SetTimer
PostMessageW
PostThreadMessageW
GetMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
IsClipboardFormatAvailable
GetDialogBaseUnits
DrawMenuBar
IsIconic
FlashWindow
GetMenuState
wsprintfW
IsChild
EqualRect
IsWindowEnabled
EnumChildWindows
MessageBoxIndirectW
SystemParametersInfoW
SendDlgItemMessageW
PeekMessageW
LoadCursorW
GetWindowDC
LoadImageW
DrawFocusRect
InflateRect
OffsetRect
DeferWindowPos
GetUpdateRect
GetWindow
PtInRect
GetWindowTextLengthW
GetDesktopWindow
UnhookWindowsHookEx
GetLastInputInfo
CallNextHookEx
SetWindowsHookExW
MapWindowPoints
ClientToScreen
SetRect
AdjustWindowRectEx
MsgWaitForMultipleObjects
GetMessageTime
IntersectRect
WindowFromDC
ValidateRect
UnionRect
SetWindowRgn

gdi32

CreateEnhMetaFileA
Rectangle
MoveToEx
LineTo
CloseEnhMetaFile
DeleteEnhMetaFile
GetEnhMetaFileA
PlayEnhMetaFile
GetStockObject
CreatePalette
Ellipse
GetClipRgn
CreateRectRgn
SelectClipRgn
CreateDCW
LPtoDP
SaveDC
SetWindowOrgEx
SetViewportOrgEx
GetSystemPaletteEntries
GetPaletteEntries
BitBlt
CreateCompatibleBitmap
CreatePen
SetDIBits
GetDIBits
EnumFontFamiliesExW
CreateFontIndirectW
DPtoLP
SetBkMode
GetTextExtentPoint32W
FillRgn
CreatePolygonRgn
GetTextMetricsW
Polygon
CreateBitmap
IntersectClipRect
GetClipBox
SetTextAlign
GetTextAlign
ExcludeClipRect
GetMapMode
SetMapMode
GetViewportExtEx
GetWindowExtEx
CreateRectRgnIndirect
RestoreDC
GetLayout
SetLayout
StretchBlt
GetDIBColorTable
SetTextColor
SetBkColor
CreateHalftonePalette
SelectPalette
RealizePalette
CreateSolidBrush
DeleteObject
GetDeviceCaps
CreateDIBSection
GetObjectW
SetDIBColorTable
SelectObject
DeleteDC
CreateCompatibleDC

comdlg32

GetOpenFileNameW
GetSaveFileNameW
ChooseFontW

advapi32

RegOpenKeyW

shell32

ShellExecuteW
DragQueryFileW
SHGetFolderPathW
Shell_NotifyIconW
Shell_NotifyIconA
SHAppBarMessage
DragFinish
DragAcceptFiles
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
ShellExecuteExW

ole32

StgOpenStorageOnILockBytes
IIDFromString
CoInitialize
CoUninitialize
StringFromCLSID
CoGetClassObject
OleLockRunning
OleFlushClipboard
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
OleSaveToStream
WriteClassStm
OleLoadFromStream
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleCreateStaticFromData
OleRun
DoDragDrop
CoTaskMemAlloc
CoCreateGuid
CoTaskMemFree
StringFromGUID2
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
RegisterDragDrop
RevokeDragDrop
CoCreateInstance
CoRegisterClassObject
CoRevokeClassObject
OleUninitialize
OleInitialize
GetHGlobalFromILockBytes

comctl32

CreateToolbarEx
ImageList_Add
ImageList_DrawEx
ImageList_GetIcon
ImageList_Destroy
ImageList_Draw
ImageList_EndDrag
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragMove
ImageList_DragLeave
CreateStatusWindowW
PropertySheetW
ImageList_Remove
ImageList_AddMasked
ImageList_Create

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
VerQueryValueW

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee759f05583cf3359ce399e0b183a965

Code Sign

0d:a5:60:5d:fc:28:3a:4e:bf:01:ac:f4:c2:87:59:aeCertificate

Extended Key Usages

44:a7:ff:30:40:db:ef:00:10:c7:f2:03:cc:f7:f4:b1:a5:e2:4d:a7Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

comctl32

version

Sections

.text Size: 48KB - Virtual size: 48KB

.rdata Size: 512B - Virtual size: 4B

.data Size: 291KB - Virtual size: 291KB

.rsrc Size: 104KB - Virtual size: 103KB

.reloc Size: 2KB - Virtual size: 1KB

0d:a5:60:5d:fc:28:3a:4e:bf:01:ac:f4:c2:87:59:ae
Certificate

44:a7:ff:30:40:db:ef:00:10:c7:f2:03:cc:f7:f4:b1:a5:e2:4d:a7
Signer

.text
Size: 48KB - Virtual size: 48KB

.rdata
Size: 512B - Virtual size: 4B

.data
Size: 291KB - Virtual size: 291KB

.rsrc
Size: 104KB - Virtual size: 103KB

.reloc
Size: 2KB - Virtual size: 1KB