c136b5e2b892d3cbab20d6c659b59160_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c136b5e2b892d3cbab20d6c659b59160_JaffaCakes118
Size

276KB
MD5

c136b5e2b892d3cbab20d6c659b59160
SHA1

5a90c968d8c428e9759a41dc053a268ca64d092c
SHA256

bd74ab5e5e187c80a740a34ad77bbac9d931b512b076624efe384cb0922707d4
SHA512

710a6b89411e37249fa37abfddccbd4555f8a7fc287a2095cd2c71bf01182a2390816bf28ee53f33ae7e2afaf89f0cad78c0fd52b63dbbf0e2a7f1c9c33b84b2
SSDEEP

6144:0DFVhW9rUSUa4klU2SC9IZ/NkyBr0i51eQwMAvsuA6A:0DFVErUSCqUFCuNkyBt1e4AvET

Score

1^/10

Malware Config

Signatures

Files

c136b5e2b892d3cbab20d6c659b59160_JaffaCakes118
.exe windows:4 windows x86 arch:x86

10df4effdccda068cdbe539c9036ff55

Code Sign

06:e2:bc:62:8e:28:f4:7d:b8:fd:0e:ea:7f:f3:37:50
Certificate

Issuer

CN=5r6Io0OJu3L2

Not Before

16/03/2012, 07:53

Not After

31/12/2039, 23:59

Subject

CN=5r6Io0OJu3L2

Extended Key Usages

ExtKeyUsageCodeSigning

8c:ed:3a:37:5c:7e:be:01:73:57:16:66:5c:85:d9:34:20:55:a4:05
Signer

Actual PE Digest

8c:ed:3a:37:5c:7e:be:01:73:57:16:66:5c:85:d9:34:20:55:a4:05

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
LoadLibraryW
CreateFileA
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CancelDeviceWakeupRequest
SetPriorityClass
BeginUpdateResourceA
RemoveDirectoryW
EnumSystemLanguageGroupsA
FlushViewOfFile
CreateProcessA
CreateFileW
SetCommTimeouts
InterlockedExchangeAdd
ReplaceFile
GetDateFormatW
FindNextVolumeMountPointW
FormatMessageW
EnterCriticalSection
WriteFile
GetTapeParameters
GetConsoleAliasesLengthW
GetDevicePowerState
UnmapViewOfFile
CreateFileMappingA
ContinueDebugEvent
VerLanguageNameW
GetSystemInfo
GlobalDeleteAtom
GetDiskFreeSpaceW
QueueUserWorkItem
GetAtomNameW
VirtualProtectEx
ResetWriteWatch
CreateDirectoryExA
SetCurrentDirectoryW
SetCommMask
EnumCalendarInfoExA
GetStdHandle
InterlockedDecrement
FoldStringA
FindFirstFileExW
SetCalendarInfoW
LoadLibraryExW
AddConsoleAliasA
FindResourceExW
SwitchToFiber
SetConsoleTitleA
SetHandleCount
FindFirstFileExA
OpenJobObjectA
GlobalFree
FindAtomW
Beep
IsBadHugeWritePtr
SetProcessShutdownParameters
SetHandleInformation
LocalReAlloc
PeekConsoleInputW
FindClose
GlobalMemoryStatusEx
GetDefaultCommConfigW
GetStringTypeExA
GetComputerNameA
HeapDestroy
WriteConsoleOutputCharacterW
EnumDateFormatsA
CreateTimerQueue
CreateEventA
InitializeCriticalSectionAndSpinCount
ReadDirectoryChangesW
GetBinaryType
GetConsoleCP
SetCommState
GetCommProperties
ResetEvent
UnlockFile
IsBadCodePtr
GetCurrentDirectoryW
_lopen
GetCompressedFileSizeA
GetThreadSelectorEntry
IsBadWritePtr
GetComputerNameExA
GetConsoleAliasesA
CreateTimerQueueTimer
CreateToolhelp32Snapshot
CopyFileA
GetNamedPipeHandleStateA
FindFirstChangeNotificationA
GetTempFileNameW
GetUserDefaultLCID
GlobalHandle
SetInformationJobObject
GetCurrencyFormatW
ReadFile
GetLongPathNameW
GetPrivateProfileIntW
lstrcmpiW
LocalFileTimeToFileTime

user32

TabbedTextOutW
IsCharAlphaA
GetWindow
GetMenuItemRect
GetMessageTime
GetMenuDefaultItem
LoadKeyboardLayoutA
KillTimer
GetQueueStatus
GetClassLongW
DefFrameProcW
CreateIconFromResourceEx
UnpackDDElParam
FindWindowExA
CreateCaret
CreateWindowExA
CreatePopupMenu
ScrollWindowEx
SetSysColors
DrawIconEx
GetMouseMovePointsEx
CopyImage
MessageBoxA
DlgDirSelectComboBoxExA
CreateAcceleratorTableA
CreateWindowStationW
IsCharLowerW
MessageBeep
GetKeyboardLayoutNameA
SetForegroundWindow
DefWindowProcW
MenuItemFromPoint
SetDeskWallpaper
MessageBoxExW
ShowScrollBar
DdeReconnect
SetClassWord
ValidateRect
LoadMenuW
UpdateLayeredWindow
AppendMenuA
FindWindowA
GetUserObjectInformationA
SetCapture
SwapMouseButton
GetWindowWord
IMPSetIMEW
SetWindowLongW
UnhookWindowsHookEx
OemToCharW
ToUnicodeEx
DialogBoxParamW
IMPQueryIMEA
wsprintfA
EnumDisplaySettingsExA
SwitchDesktop
IsCharAlphaNumericW
LoadCursorFromFileW
CharToOemBuffA
EndMenu
SetCaretPos
AppendMenuW
ReuseDDElParam
PeekMessageW
InsertMenuA
DrawFrameControl
CharUpperBuffW
SetFocus
SetMessageExtraInfo
PackDDElParam
InsertMenuW
EqualRect
DdeSetUserHandle
UpdateWindow
AttachThreadInput
GetPropW
ModifyMenuW
CopyIcon
GetClipboardOwner
IsZoomed
EnumClipboardFormats
SetMenu
PostMessageW
EnumWindowStationsW
OpenDesktopA
OemToCharBuffA
RealGetWindowClassW
GetWindowInfo
DdeGetData
MonitorFromRect
UnhookWindowsHook
IsDialogMessage
DdeInitializeW

advapi32

RegOpenKeyExW

oleaut32

SafeArrayCopy
OleLoadPicture
SysAllocStringLen
VarUI4FromR8
VarUI1FromI1
VarI1FromR4
VarI2FromStr
VarR4FromI4
VarI2FromI1
BSTR_UserUnmarshal
VarFormatNumber
VarDecFromR8
LoadTypeLi
VarBoolFromUI1
VarBoolFromDec
VarUI2FromDec
VarCyFromI2
VarR8FromDec
VarI4FromUI4
VarDecFromCy
VarI2FromDisp
VarI2FromDate
VarUI1FromUI4
VarUI2FromI2
VarUI2FromR4
VarBoolFromCy
VarI2FromCy
VarDateFromUdateEx
VarDecFromUI2
GetAltMonthNames
VarDateFromUI4
OleLoadPictureFile
VarDecSu
CreateStdDispatch
LPSAFEARRAY_Unmarshal
SafeArrayGetElemsize
VarR4FromI1
VarR4FromDate
VarBoolFromI2
VarI4FromDate
VarAnd
VarCyCmp
VarDecDiv
VarUI1FromStr
LoadRegTypeLi
VarDecAbs
VarI4FromR4
VarI1FromStr
VarBstrFromR4
VarR8FromDisp
VarBstrFromDec
OaBuildVersion
VARIANT_UserSize
SysStringLen
VarPow
VarDecCmpR8
VarDateFromI1
VarI4FromUI1
VarI2FromDec
VarBoolFromI1
BSTR_UserSize
LHashValOfNameSys
VarBoolFromStr
LPSAFEARRAY_Marshal
VarCyInt
VarCyFromR4
VarUI2FromCy
VarI4FromDec
VariantCopyInd
SafeArrayAllocData
BstrFromVector
VarBoolFromUI4
SysStringByteLen
VarI4FromI1
VarI2FromR4
VarI2FromUI1
VarBoolFromUI2
VarDecFromStr
GetActiveObject
VarBstrFromCy
VarMul
VARIANT_UserFree
VarCyFromUI2
VarR8FromBool
VarI1FromDec
BSTR_UserFree
VarCyCmpR8
VarDecNeg
VarInt
OleLoadPictureFileEx
SafeArrayGetLBound

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

r2
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10df4effdccda068cdbe539c9036ff55

Code Sign

06:e2:bc:62:8e:28:f4:7d:b8:fd:0e:ea:7f:f3:37:50Certificate

Extended Key Usages

8c:ed:3a:37:5c:7e:be:01:73:57:16:66:5c:85:d9:34:20:55:a4:05Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

Sections

.text Size: 4KB - Virtual size: 3KB

r2 Size: 260KB - Virtual size: 259KB

.data Size: 7KB - Virtual size: 6KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

06:e2:bc:62:8e:28:f4:7d:b8:fd:0e:ea:7f:f3:37:50
Certificate

8c:ed:3a:37:5c:7e:be:01:73:57:16:66:5c:85:d9:34:20:55:a4:05
Signer

.text
Size: 4KB - Virtual size: 3KB

r2
Size: 260KB - Virtual size: 259KB

.data
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB