fab107844d2f625518cf66b55f4c8b47_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fab107844d2f625518cf66b55f4c8b47_JaffaCakes118
Size

111KB
MD5

fab107844d2f625518cf66b55f4c8b47
SHA1

98155e3c1310c369f87144df065e6a7e82369a71
SHA256

d8cf8ab383df895233bb8c3bb9d6831462d0c95550fc844f2cac19efd5026a39
SHA512

c350eb9377608c948eab5055243208aa4509aa7d7a8f8a20c7140bd6686f2f29e116986171f5a1001cf2b161353c3b2be06074948476963745a0917d492eb732
SSDEEP

1536:yF3VsveV0tECPvISE8ILUapoCFZrzIAFivpEvXlxafjx:eF0tE+o8CoCFepu7afN

Score

1^/10

Malware Config

Signatures

Files

fab107844d2f625518cf66b55f4c8b47_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2eb7a126cd6c7689254352fab6122d19

Code Sign

0a:5a:d4:c2:6e:8c:85:4d:be:25:75:f7:a3:47:af:08
Certificate

Issuer

CN=t23 inc

Not Before

14/01/2012, 21:04

Not After

31/12/2039, 23:59

Subject

CN=t23 inc

Extended Key Usages

ExtKeyUsageCodeSigning

43:af:6b:8f:33:1f:c0:23:15:d5:69:a5:ef:d2:17:02:48:45:82:b7
Signer

Actual PE Digest

43:af:6b:8f:33:1f:c0:23:15:d5:69:a5:ef:d2:17:02:48:45:82:b7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualLock
WriteConsoleOutputAttribute
WritePrivateProfileStructW
WriteProfileSectionW
VerifyVersionInfoW
WriteTapemark
lstrcmpA
lstrcpyA
TransactNamedPipe
TlsGetValue
TlsAlloc
TerminateThread
TerminateJobObject
SizeofResource
SetTimerQueueTimer
SetThreadPriority
SetSystemPowerState
SetNamedPipeHandleState
SetFileAttributesW
SetFileApisToOEM
ResumeThread
ReadFileScatter
ReadConsoleOutputCharacterA
ReadConsoleOutputAttribute
OutputDebugStringA
OpenWaitableTimerW
OpenProcess
OpenFile
MulDiv
MoveFileExW
MapViewOfFileEx
MapUserPhysicalPages
LocalLock
LocalFlags
LoadModule
IsValidLanguageGroup
InterlockedExchangeAdd
InitializeCriticalSection
HeapWalk
HeapSize
HeapLock
HeapFree
GlobalMemoryStatus
GlobalHandle
GlobalFindAtomA
GetVolumeInformationA
GetUserDefaultLCID
GetThreadContext
GetTapeParameters
GetSystemDefaultLCID
GetStartupInfoW
GetStartupInfoA
GetProcessPriorityBoost
GetOEMCP
GetNumberOfConsoleInputEvents
GetNamedPipeInfo
GetModuleFileNameW
GetLogicalDriveStringsA
GetExitCodeProcess
GetDefaultCommConfigA
GetCurrencyFormatW
GetConsoleOutputCP
GetConsoleFontSize
GetConsoleAliasW
GetCalendarInfoA
GetCPInfoExA
GetACP
FreeLibraryAndExitThread
FindVolumeClose
FindNextVolumeA
FindFirstVolumeA
FindFirstChangeNotificationW
ExpandEnvironmentStringsW
EnumDateFormatsA
EnterCriticalSection
DnsHostnameToComputerNameW
DnsHostnameToComputerNameA
DisableThreadLibraryCalls
DeleteFileW
DeleteFileA
DebugBreak
CreateJobObjectA
CreateEventA
CompareFileTime
CloseHandle
CancelWaitableTimer
CancelIo
BuildCommDCBA
BackupWrite
AreFileApisANSI
GetSystemInfo
GetProcAddress
LoadLibraryW
CreateFileW
GetProcessHeap
LoadLibraryA
GetWindowsDirectoryW
lstrcatW
WriteProfileStringA

user32

EmptyClipboard
DrawIcon
DrawCaption
DispatchMessageW
DestroyIcon
DestroyCaret
DeregisterShellHookWindow
DefMDIChildProcW
DefDlgProcW
DdePostAdvise
DdeGetLastError
DdeFreeDataHandle
DdeDisconnect
DdeCreateStringHandleW
CreateDialogParamW
CreateDialogIndirectParamA
CreateCaret
CloseWindowStation
ChildWindowFromPointEx
CheckMenuItem
CheckDlgButton
CharNextA
CharLowerW
CharLowerBuffW
ChangeMenuW
ChangeMenuA
ChangeDisplaySettingsA
CascadeWindows
CallWindowProcW
CallMsgFilterA
ArrangeIconicWindows
EnableWindow
EndDeferWindowPos
EnumDesktopsW
EnumDisplaySettingsExW
EnumWindows
ExcludeUpdateRgn
GetAltTabInfo
GetAltTabInfoA
GetClassLongW
GetClassNameA
GetClipboardData
GetClipboardSequenceNumber
GetDlgItemTextW
GetGuiResources
GetInputDesktop
GetKeyboardType
GetMenuContextHelpId
GetMenuDefaultItem
GetMenuItemInfoA
GetMessageTime
GetMessageW
GetMouseMovePointsEx
GetNextDlgTabItem
GetPropW
GetScrollInfo
GetScrollPos
GetSubMenu
GetSystemMenu
GetSystemMetrics
GetUserObjectSecurity
GetWindowInfo
GetWindowModuleFileName
GetWindowTextA
GrayStringA
HiliteMenuItem
IMPSetIMEW
ImpersonateDdeClientWindow
InsertMenuItemA
IsChild
IsDlgButtonChecked
IsRectEmpty
LoadMenuA
LockSetForegroundWindow
LookupIconIdFromDirectoryEx
MessageBoxIndirectA
NotifyWinEvent
PaintDesktop
RemovePropW
SetActiveWindow
SetDlgItemTextA
SetMessageExtraInfo
SetScrollInfo
SetScrollRange
SetWinEventHook
TrackMouseEvent
UnregisterClassW
UnregisterHotKey
UpdateWindow
SwitchToThisWindow
SwapMouseButton
ShowScrollBar
ShowCaret
SetWindowRgn
SetWindowLongW
TileWindows

gdi32

CloseEnhMetaFile
BitBlt
CLIPOBJ_cEnumStart
CancelDC
CheckColorsInGamut
CopyMetaFileA
CreateColorSpaceA
CreateCompatibleDC
CreateDIBPatternBrushPt
CreateEllipticRgn
CreateEnhMetaFileA
CreatePalette
CreatePolyPolygonRgn
CreateScalableFontResourceW
DeviceCapabilitiesExA
EndFormPage
EngCreateDeviceBitmap
EngCreateDeviceSurface
EngDeleteSurface
EngEraseSurface
EngFreeModule
EngLineTo
EngStrokePath
EnumEnhMetaFile
EnumObjects
EudcLoadLinkW
ExtCreateRegion
ExtSelectClipRgn
FONTOBJ_pifi
FONTOBJ_pvTrueTypeFontFile
FillPath
GdiComment
GdiConvertBrush
GdiConvertDC
GdiConvertPalette
GdiDllInitialize
GdiEntry6
GdiGetPageHandle
GdiQueryFonts
GdiRealizationInfo
GdiSetBatchLimit
GdiStartPageEMF
GdiTransparentBlt
GetCharABCWidthsFloatA
GetCharWidth32A
GetCharWidth32W
GetClipBox
GetClipRgn
GetDIBColorTable
GetEnhMetaFilePaletteEntries
GetObjectType
GetObjectW
GetPolyFillMode
GetROP2
GetStringBitmapW
GetSystemPaletteEntries
GetTextColor
GetTextExtentExPointI
GetTextExtentPointI
GetViewportOrgEx
HT_Get8BPPMaskPalette
LineDDA
MoveToEx
PatBlt
PlayMetaFileRecord
PolyBezier
Polyline
PolylineTo
PtInRegion
PtVisible
RestoreDC
SetBitmapDimensionEx
SetBoundsRect
SetDIBits
SetICMMode
SetMapMode
SetMapperFlags
SetMetaRgn
SetPaletteEntries
SetPixelFormat
TextOutW
UnrealizeObject
UpdateColors
WidenPath
XFORMOBJ_bApplyXform
XFORMOBJ_iGetXform
bInitSystemAndFontsDirectoriesW
bMakePathNameW
gdiPlaySpoolStream
BRUSHOBJ_pvGetRbrush

shell32

SHLoadInProc
Shell_NotifyIconW
Shell_NotifyIconA
ShellExecuteW
ShellExecuteExW
ShellExecuteEx
ShellAboutA
SHQueryRecycleBinW
SHPathPrepareForWriteW
SHPathPrepareForWriteA
SHIsFileAvailableOffline
SHInvokePrinterCommandA
CheckEscapesW
CommandLineToArgvW
DoEnvironmentSubstA
DoEnvironmentSubstW
DragQueryFileAorW
DragQueryFileW
DragQueryPoint
DuplicateIcon
ExtractAssociatedIconA
ExtractAssociatedIconW
ExtractIconEx
ExtractIconExA
ExtractIconExW
ExtractIconW
FindExecutableA
FindExecutableW
SHAddToRecentDocs
SHAppBarMessage
SHBrowseForFolder
SHCreateDirectoryExW
SHEmptyRecycleBinA
SHFileOperation
SHFileOperationA
SHFormatDrive
SHFreeNameMappings
SHGetDataFromIDListA
SHGetDataFromIDListW
SHGetDiskFreeSpaceExA
SHGetFileInfo
SHGetFileInfoA
SHGetFileInfoW
SHGetFolderLocation
SHGetFolderPathA
SHGetFolderPathW
SHGetIconOverlayIndexA
SHGetPathFromIDList
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
WOWShellExecute

ole32

HDC_UserSize
HENHMETAFILE_UserSize
HGLOBAL_UserUnmarshal
HICON_UserFree
HMENU_UserMarshal
HMETAFILEPICT_UserMarshal
HMETAFILE_UserMarshal
HMETAFILE_UserSize
HPALETTE_UserMarshal
HWND_UserMarshal
HWND_UserUnmarshal
OleCreateFromDataEx
OleCreateFromFile
OleDestroyMenuDescriptor
OleDuplicateData
OleFlushClipboard
OleInitialize
OleQueryCreateFromData
OleRegEnumFormatEtc
OleSetClipboard
ReadClassStg
ReadFmtUserTypeStg
ReadOleStg
ReadStringStream
RegisterDragDrop
SNB_UserMarshal
STGMEDIUM_UserFree
STGMEDIUM_UserSize
StgConvertVariantToProperty
StgCreateDocfileOnILockBytes
StgGetIFillLockBytesOnFile
StgSetTimes
StringFromCLSID
StringFromGUID2
UtConvertDvtd16toDvtd32
WdtpInterfacePointer_UserFree
WdtpInterfacePointer_UserMarshal
WriteClassStm
HBITMAP_UserFree
GetHGlobalFromStream
CreatePointerMoniker
CreateGenericComposite
CreateDataAdviseHolder
CreateClassMoniker
CreateBindCtx
CoQueryClientBlanket
CoCreateInstanceEx
CoCancelCall
BindMoniker
HBRUSH_UserFree

shlwapi

StrChrW
StrCmpNA
StrRChrIA
StrRChrIW
StrRChrW
StrRStrIW
StrStrA
StrStrIA
StrStrIW
StrStrW
StrChrIA

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2eb7a126cd6c7689254352fab6122d19

Code Sign

0a:5a:d4:c2:6e:8c:85:4d:be:25:75:f7:a3:47:af:08Certificate

Extended Key Usages

43:af:6b:8f:33:1f:c0:23:15:d5:69:a5:ef:d2:17:02:48:45:82:b7Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

shlwapi

Sections

.text Size: 76KB - Virtual size: 76KB

.data Size: 512B - Virtual size: 556B

.rsrc Size: 30KB - Virtual size: 29KB

.reloc Size: 2KB - Virtual size: 2KB

0a:5a:d4:c2:6e:8c:85:4d:be:25:75:f7:a3:47:af:08
Certificate

43:af:6b:8f:33:1f:c0:23:15:d5:69:a5:ef:d2:17:02:48:45:82:b7
Signer

.text
Size: 76KB - Virtual size: 76KB

.data
Size: 512B - Virtual size: 556B

.rsrc
Size: 30KB - Virtual size: 29KB

.reloc
Size: 2KB - Virtual size: 2KB