dfcc9960a7244995523b5c23e014fc7e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

dfcc9960a7244995523b5c23e014fc7e_JaffaCakes118
Size

59KB
MD5

dfcc9960a7244995523b5c23e014fc7e
SHA1

6f15a30cb233baa561294a531f46d47443103f88
SHA256

397cc5c641d2b0e26f0c5d5aee623481247e97e194d5c33e8086e0ce577e8280
SHA512

972f40b18bbf3cb339789c99ec710542409f07b3292d69baf4f8f0e3b662f1e426c3d66f8854beb87b93a5067d6566e5c280d1be4a6cdc35eb08b605251cee35
SSDEEP

768:JOJpNxsRLUX+ob9T9XSBzP4KWrIRFktfP7xmB2lEcsTPissO+wcSDPnGMEaBgK:IqUXR9T9X6zDRItnNmB2acUAGDvlE6f

Score

1^/10

Malware Config

Signatures

Files

dfcc9960a7244995523b5c23e014fc7e_JaffaCakes118
.dll windows:5 windows x86 arch:x86

1ec01047b898a2c075c87b411b39dcec

Code Sign

59:52:4b:90:0c:c6:56:79:b9:60:98:70:86:d7:5b:4e
Certificate

Issuer

CN=qw34t123tc125c1

Not Before

22/02/2012, 06:51

Not After

31/12/2039, 23:59

Subject

CN=qw34t123tc125c1

Extended Key Usages

ExtKeyUsageCodeSigning

3c:d3:db:7c:87:f6:a8:dd:db:c8:5c:39:f9:c1:ec:52:2f:a6:3d:9a
Signer

Actual PE Digest

3c:d3:db:7c:87:f6:a8:dd:db:c8:5c:39:f9:c1:ec:52:2f:a6:3d:9a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedCompareExchange
GetProcAddress
LoadLibraryA
VirtualAlloc
GetWindowsDirectoryW

user32

DdeInitializeA
DdeQueryConvInfo
DdeQueryStringA
DdeReconnect
DdeSetUserHandle
DdeUnaccessData
DefDlgProcW
DestroyWindow
DialogBoxIndirectParamA
DialogBoxIndirectParamW
DlgDirListA
DlgDirSelectComboBoxExA
DlgDirSelectComboBoxExW
DrawFocusRect
DrawIcon
DrawIconEx
DrawTextW
EnumClipboardFormats
EnumWindows
ExcludeUpdateRgn
FrameRect
GetActiveWindow
GetAltTabInfo
GetAsyncKeyState
GetCaretBlinkTime
GetClassInfoExA
GetClassInfoExW
GetClassLongW
GetClassWord
GetClientRect
GetClipCursor
GetClipboardData
GetClipboardSequenceNumber
GetDC
GetDCEx
GetDesktopWindow
GetDoubleClickTime
GetKeyboardLayoutNameA
GetLastActivePopup
GetLastInputInfo
GetMenuContextHelpId
GetMessageA
GetMessageTime
GetMonitorInfoA
GetProcessDefaultLayout
GetPropW
GetScrollInfo
GetTabbedTextExtentW
GetThreadDesktop
GetWindow
GetWindowLongA
GetWindowModuleFileName
GetWindowModuleFileNameA
GetWindowWord
HiliteMenuItem
DdeFreeDataHandle
InsertMenuA
IsCharAlphaNumericA
IsCharAlphaW
IsClipboardFormatAvailable
IsWindowEnabled
LoadBitmapA
LoadCursorA
LoadCursorFromFileA
LoadKeyboardLayoutA
LoadStringA
MapVirtualKeyExW
MapVirtualKeyW
MenuItemFromPoint
MonitorFromPoint
NotifyWinEvent
OemToCharA
OemToCharBuffW
OpenDesktopA
OpenWindowStationW
PackDDElParam
PeekMessageA
PostThreadMessageW
RealGetWindowClassW
RegisterDeviceNotificationA
RegisterShellHookWindow
RegisterWindowMessageA
ReleaseCapture
ScreenToClient
ScrollDC
ScrollWindow
SendMessageCallbackA
SendMessageTimeoutW
SetActiveWindow
SetCaretBlinkTime
SetDoubleClickTime
SetLastErrorEx
SetMenuContextHelpId
SetPropA
SetUserObjectSecurity
SetWindowContextHelpId
SetWindowRgn
SetWindowTextA
SetWindowsHookA
SetWindowsHookExA
SwapMouseButton
TrackPopupMenuEx
TranslateAcceleratorW
TranslateMDISysAccel
UnpackDDElParam
UpdateLayeredWindow
UpdateWindow
VkKeyScanExA
WINNLSEnableIME
WINNLSGetEnableStatus
WaitMessage
WindowFromDC
WindowFromPoint
keybd_event
wsprintfA
wvsprintfA
DdeAddData
CreateDialogParamA
CreateDialogIndirectParamW
CreateCursor
CreateCaret
CountClipboardFormats
CopyAcceleratorTableA
CloseWindowStation
CheckMenuItem
CharUpperBuffA
CharToOemBuffW
CharNextW
CharLowerBuffA
ChangeDisplaySettingsExA
CallWindowProcW
CallMsgFilterA
BringWindowToTop
BeginDeferWindowPos
ArrangeIconicWindows
AppendMenuW
AdjustWindowRectEx
InSendMessageEx

comdlg32

ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW
GetFileTitleA
FindTextW
ChooseColorA

ole32

BindMoniker
CLIPFORMAT_UserMarshal
CLIPFORMAT_UserSize
CLSIDFromProgID
CLSIDFromProgIDEx
CLSIDFromString
CoAllowSetForegroundWindow
CoBuildVersion
CoCopyProxy
CoCreateInstance
CoCreateObjectInContext
CoFileTimeNow
CoFreeUnusedLibraries
CoGetClassObject
CoGetCurrentProcess
CoGetInstanceFromIStorage
CoGetMalloc
CoGetMarshalSizeMax
CoGetObjectContext
CoInitialize
CoIsOle1Class
CoQueryProxyBlanket
CoQueryReleaseObject
CoRegisterChannelHook
CoRegisterClassObject
CoRegisterMallocSpy
CoRegisterMessageFilter
CoRegisterPSClsid
CoRegisterSurrogateEx
CoReleaseMarshalData
CoRevertToSelf
CoRevokeMallocSpy
CoSetCancelObject
CoTaskMemAlloc
CoUninitialize
CoUnloadingWOW
CoWaitForMultipleHandles
CreateAntiMoniker
CreateClassMoniker
CreateGenericComposite
CreateItemMoniker
CreateOleAdviseHolder
CreateStdProgressIndicator
DcomChannelSetHResult
DllDebugObjectRPCHook
FmtIdToPropStgName
FreePropVariantArray
GetClassFile
GetConvertStg
GetDocumentBitStg
HACCEL_UserFree
HACCEL_UserMarshal
HBITMAP_UserSize
HBITMAP_UserUnmarshal
HBRUSH_UserUnmarshal
HDC_UserMarshal
HDC_UserUnmarshal
HENHMETAFILE_UserFree
HENHMETAFILE_UserUnmarshal
HGLOBAL_UserFree
HGLOBAL_UserMarshal
HGLOBAL_UserSize
HICON_UserFree
HICON_UserMarshal
HMENU_UserFree
HMENU_UserUnmarshal
HMETAFILEPICT_UserUnmarshal
HMETAFILE_UserFree
HMETAFILE_UserMarshal
HWND_UserFree
HWND_UserUnmarshal
HkOleRegisterObject
IIDFromString
MkParseDisplayName
MonikerRelativePathTo
OleBuildVersion
OleConvertIStorageToOLESTREAM
OleCreateDefaultHandler
OleCreateEmbeddingHelper
OleCreateEx
OleCreateFromDataEx
OleCreateLink
OleCreateLinkEx
OleCreateLinkToFile
OleCreateMenuDescriptor
OleCreateStaticFromData
OleFlushClipboard
OleGetAutoConvert
OleGetIconOfFile
OleInitializeWOW
OleIsCurrentClipboard
OleLoad
OleLockRunning
OleNoteObjectVisible
OleRegGetUserType
OleRun
OleSaveToStream
OleSetAutoConvert
OleSetContainedObject
OleSetMenuDescriptor
OleUninitialize
OpenOrCreateStream
ReadClassStm
ReadFmtUserTypeStg
ReadOleStg
SNB_UserFree
SNB_UserMarshal
SNB_UserSize
STGMEDIUM_UserMarshal
SetConvertStg
SetDocumentBitStg
StgCreateDocfileOnILockBytes
StgCreatePropStg
StgCreateStorageEx
StgGetIFillLockBytesOnILockBytes
StgIsStorageFile
StgOpenStorageOnILockBytes
UtGetDvtd32Info
WdtpInterfacePointer_UserUnmarshal
WriteOleStg
WriteStringStream

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text6
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text5
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ec01047b898a2c075c87b411b39dcec

Code Sign

59:52:4b:90:0c:c6:56:79:b9:60:98:70:86:d7:5b:4eCertificate

Extended Key Usages

3c:d3:db:7c:87:f6:a8:dd:db:c8:5c:39:f9:c1:ec:52:2f:a6:3d:9aSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

ole32

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 616B

.text6 Size: 2KB - Virtual size: 1KB

.text1 Size: 1024B - Virtual size: 1000B

.text2 Size: 1024B - Virtual size: 1000B

.text5 Size: 20KB - Virtual size: 20KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 2KB - Virtual size: 1KB

59:52:4b:90:0c:c6:56:79:b9:60:98:70:86:d7:5b:4e
Certificate

3c:d3:db:7c:87:f6:a8:dd:db:c8:5c:39:f9:c1:ec:52:2f:a6:3d:9a
Signer

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 616B

.text6
Size: 2KB - Virtual size: 1KB

.text1
Size: 1024B - Virtual size: 1000B

.text2
Size: 1024B - Virtual size: 1000B

.text5
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 2KB - Virtual size: 1KB