ef69076ae222bbada36ad4dda7481b8d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ef69076ae222bbada36ad4dda7481b8d_JaffaCakes118
Size

166KB
MD5

ef69076ae222bbada36ad4dda7481b8d
SHA1

ef94c84d9cca82db7f2fb393120d1049e4f05733
SHA256

24baf734410fc8f2aec641418b6705ec24c15b7b5be11163da630afd7567bb35
SHA512

ea8c0dfb7725a704354ef739bd183c797e36900d49354ab379f8f8f418eba58fddea0a9ae2fe9e97a60b60fabc20d9e5d2dca85411e7ba269c37123e193c72f3
SSDEEP

3072:qWQjDkPrDKAr3NzY4FPQfcSCu/EkvtUU92g8H2fCAtlF7R8T0ck2awgx1b:7Pn/d84pQRbjKUIlHUCAb8Ttk2anxN

Score

1^/10

Malware Config

Signatures

Files

ef69076ae222bbada36ad4dda7481b8d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c1807b153e6a78fee2af07f50e1465ec

Code Sign

29:91:e1:1b:94:9b:d7:9b:48:8d:41:3e:68:60:cd:19
Certificate

Issuer

CN=123ttt

Not Before

08/03/2012, 07:59

Not After

31/12/2039, 23:59

Subject

CN=123ttt

Extended Key Usages

ExtKeyUsageCodeSigning

9f:60:48:89:13:c2:9d:07:ce:08:7f:8f:08:30:01:9d:56:49:89:54
Signer

Actual PE Digest

9f:60:48:89:13:c2:9d:07:ce:08:7f:8f:08:30:01:9d:56:49:89:54

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
GetCommState
lstrcpyA
lstrlenA
GetWindowsDirectoryA
LoadLibraryA
GetProcAddress
CreateFileA
VirtualAlloc

user32

AllowSetForegroundWindow
CallWindowProcW
ChangeDisplaySettingsExA
CharNextExA
CharPrevW
CharUpperA
CharUpperW
ChildWindowFromPoint
CreateDesktopW
DdeAddData
DdeConnectList
DdeFreeStringHandle
DdeGetLastError
DdeInitializeW
DdeQueryConvInfo
DdeQueryNextServer
DdeQueryStringW
DdeReconnect
DefWindowProcW
DestroyIcon
DestroyMenu
DispatchMessageW
DlgDirSelectComboBoxExW
DragDetect
DrawTextExA
EndPaint
EndTask
EnumDesktopsA
EnumDisplayDevicesW
EnumDisplayMonitors
EnumPropsA
GetClassInfoExA
GetClipboardFormatNameA
GetClipboardFormatNameW
GetDCEx
GetDoubleClickTime
GetKBCodePage
GetKeyboardState
GetLastActivePopup
GetMenuBarInfo
GetMenuCheckMarkDimensions
GetMenuStringA
GetQueueStatus
GetScrollPos
GetTopWindow
GetWindow
GetWindowLongW
GrayStringA
GrayStringW
IMPGetIMEW
InflateRect
InsertMenuItemW
InvalidateRect
IsCharAlphaA
IsClipboardFormatAvailable
IsHungAppWindow
LoadAcceleratorsW
LoadCursorW
LoadIconA
LockWorkStation
LookupIconIdFromDirectoryEx
MessageBeep
MessageBoxW
MoveWindow
MsgWaitForMultipleObjects
MsgWaitForMultipleObjectsEx
OpenDesktopW
PostQuitMessage
PostThreadMessageW
RealGetWindowClassA
RegisterClassA
RegisterClipboardFormatW
RegisterWindowMessageA
ScrollWindowEx
SendInput
SendMessageA
SendMessageTimeoutA
SetCapture
SetCursor
SetDlgItemTextA
SetMenu
SetMenuDefaultItem
SetMenuItemInfoA
SetWindowLongW
SetWindowTextA
ShowWindow
TabbedTextOutW
TrackMouseEvent
TrackPopupMenu
UnhookWindowsHook
UnpackDDElParam
UnregisterClassA
UnregisterClassW
VkKeyScanExW
WINNLSEnableIME

ole32

BindMoniker
CLIPFORMAT_UserSize
CoAddRefServerProcess
CoBuildVersion
CoCopyProxy
CoCreateInstanceEx
CoFileTimeToDosDateTime
CoGetClassVersion
CoGetCurrentLogicalThreadId
CoGetInstanceFromIStorage
CoGetMalloc
CoGetObject
CoImpersonateClient
CoInitializeEx
CoInitializeSecurity
CoInitializeWOW
CoQueryClientBlanket
CoQueryReleaseObject
CoReactivateObject
CoRegisterMallocSpy
CoRegisterMessageFilter
CoReleaseMarshalData
CoRevertToSelf
CoRevokeClassObject
CoSetCancelObject
CoTreatAsClass
CreateBindCtx
CreatePointerMoniker
CreateStdProgressIndicator
DoDragDrop
GetHGlobalFromStream
GetHookInterface
GetRunningObjectTable
HACCEL_UserSize
HBITMAP_UserSize
HBRUSH_UserUnmarshal
HDC_UserSize
HDC_UserUnmarshal
HGLOBAL_UserUnmarshal
HMENU_UserFree
HMETAFILEPICT_UserMarshal
HMETAFILEPICT_UserSize
HMETAFILEPICT_UserUnmarshal
HMETAFILE_UserUnmarshal
HPALETTE_UserUnmarshal
HWND_UserMarshal
IsAccelerator
OleConvertOLESTREAMToIStorageEx
OleCreateEmbeddingHelper
OleCreateFromData
OleCreateLinkFromDataEx
OleCreateLinkToFileEx
OleDuplicateData
OleGetAutoConvert
OleGetIconOfFile
OleInitialize
OleIsCurrentClipboard
OleIsRunning
OleLoad
OleLoadFromStream
OleLockRunning
OleQueryLinkFromData
OleRegEnumFormatEtc
OleSave
OleSaveToStream
OleSetAutoConvert
OleSetContainedObject
OleSetMenuDescriptor
OpenOrCreateStream
PropStgNameToFmtId
RegisterDragDrop
SNB_UserFree
SNB_UserUnmarshal
STGMEDIUM_UserSize
STGMEDIUM_UserUnmarshal
StgCreateDocfile
StgCreateStorageEx
StgGetIFillLockBytesOnFile
StgIsStorageFile
StgOpenAsyncDocfileOnIFillLockBytes
StgOpenStorage
StgOpenStorageEx
WdtpInterfacePointer_UserFree
WriteClassStm
WriteFmtUserTypeStg
WriteStringStream

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c1807b153e6a78fee2af07f50e1465ec

Code Sign

29:91:e1:1b:94:9b:d7:9b:48:8d:41:3e:68:60:cd:19Certificate

Extended Key Usages

9f:60:48:89:13:c2:9d:07:ce:08:7f:8f:08:30:01:9d:56:49:89:54Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

Sections

.text Size: 9KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 980B

.text Size: 151KB - Virtual size: 151KB

.text2 Size: 1024B - Virtual size: 800B

.reloc Size: 2KB - Virtual size: 1KB

29:91:e1:1b:94:9b:d7:9b:48:8d:41:3e:68:60:cd:19
Certificate

9f:60:48:89:13:c2:9d:07:ce:08:7f:8f:08:30:01:9d:56:49:89:54
Signer

.text
Size: 9KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 980B

.text
Size: 151KB - Virtual size: 151KB

.text2
Size: 1024B - Virtual size: 800B

.reloc
Size: 2KB - Virtual size: 1KB