fdc903936dcb187b801385a37330b0a1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fdc903936dcb187b801385a37330b0a1_JaffaCakes118
Size

305KB
MD5

fdc903936dcb187b801385a37330b0a1
SHA1

4b8ac41906d015dab037dc73d1209b4b0f3eb0a6
SHA256

31b2756ceb28201d99af83ce303a52922cde7725182731ab93cdf9fddf763dc4
SHA512

915acb4e5bde512ef6b0d9e1a9b8884575e002ce7b2144c8903c0149c3052af75bf26ddc76e722764f6e43cc4359262392f908cc8e46d17e8dce197ba1a94d56
SSDEEP

6144:6cOuatq9nLtnGR9XACo5TdW+UKaG4JFW/gRVzgUEjRDrviICU:6cO9t6ZnGLX/yZaKP4J02FartJ

Score

1^/10

Malware Config

Signatures

Files

fdc903936dcb187b801385a37330b0a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90c5e8b803f6840f6b45ca4657761447

Code Sign

73:17:67:48:fd:ee:5c:4d:bc:8a:27:87:b8:6e:5f:a1
Certificate

Issuer

CN=drVoA01yoqkQ

Not Before

14/03/2012, 05:55

Not After

31/12/2039, 23:59

Subject

CN=drVoA01yoqkQ

Extended Key Usages

ExtKeyUsageCodeSigning

f0:0c:69:9a:ae:40:c7:08:72:11:c2:67:f6:af:fd:62:9b:7b:48:99
Signer

Actual PE Digest

f0:0c:69:9a:ae:40:c7:08:72:11:c2:67:f6:af:fd:62:9b:7b:48:99

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
GetLogicalDriveStringsA
LoadLibraryA
GetProcAddress
lstrcpyW
LoadLibraryW
VirtualAlloc
ReadConsoleA
FreeLibrary
WaitForMultipleObjects
GetCurrentDirectoryA
GetCompressedFileSizeA
FileTimeToDosDateTime
SetNamedPipeHandleState
GetCPInfo
GetBinaryTypeW
RequestWakeupLatency
AddConsoleAliasA
GetProfileStringA
CancelWaitableTimer
DebugBreak
DefineDosDeviceA
GetThreadContext
InitAtomTable
FoldStringA
GetFileTime
GetCPInfoExW
GetConsoleAliasExesLengthA
CancelTimerQueueTimer
EnumTimeFormatsA
GetUserDefaultLangID
GetFileSizeEx
GlobalAlloc
GetPrivateProfileStringW
GetACP
SetFileAttributesA
GetVolumePathNameA
EnterCriticalSection
FindFirstFileExW
CreateEventW
GetEnvironmentVariableW
Process32FirstW
CreateRemoteThread
WaitNamedPipeW
GetTimeZoneInformation
GetCPInfoExA
CreateDirectoryA
GetConsoleOutputCP
FlushConsoleInputBuffer
GetNumberOfConsoleInputEvents
GetConsoleAliasExesLengthW
GetConsoleAliasesA
WaitForSingleObjectEx
GetTimeFormatW
SetThreadLocale
_lwrite
InterlockedExchange
Module32FirstW
SetFileApisToOEM
lstrlen
LoadLibraryExW
WritePrivateProfileSectionW
GlobalDeleteAtom
GlobalHandle
GetConsoleAliasesW
EnumResourceTypesA
SetLocaleInfoA
GetTimeFormatA
DuplicateHandle
VerifyVersionInfoW
SetConsoleMode
GetCompressedFileSizeW
lstrcatW
WriteProfileSectionW
WriteConsoleInputA
EnumUILanguagesA
LockFile
GetCommState
FreeEnvironmentStringsW
WriteConsoleOutputW
_lopen
GetShortPathNameA
EnumLanguageGroupLocalesW
ResetWriteWatch
SetCommTimeouts
ReadConsoleOutputAttribute
EnumSystemCodePagesA
GetConsoleWindow
GetSystemInfo
FindFirstVolumeA
VerifyVersionInfoA
CompareFileTime
GetLongPathNameW
GetDiskFreeSpaceW
FindFirstFileA
VerLanguageNameA
lstrcmpA
PeekConsoleInputA

user32

mouse_event
InsertMenuA
GetClipboardOwner
RegisterDeviceNotificationW
GetQueueStatus
GetClipboardViewer
SetWindowPos
WINNLSGetIMEHotkey
SendNotifyMessageA
OemToCharA
GetPropA
GetThreadDesktop
GetAltTabInfoW
InsertMenuW
MonitorFromWindow
EndPaint
CloseWindowStation
CharNextW
SetWindowPlacement
BringWindowToTop
CallMsgFilter
GrayStringW
GetUserObjectInformationA
CharPrevW
GetScrollRange
DestroyWindow
SendMessageA
NotifyWinEvent
DrawEdge
DlgDirSelectExW
GetSysColor
UnloadKeyboardLayout
RealGetWindowClass
CharLowerW
DdeInitializeW
SendMessageCallbackA
ShowWindowAsync
GetWindowTextLengthA
IMPQueryIMEA
MessageBeep
LoadStringW
OpenWindowStationA
ChangeMenuA
GetKeyboardLayoutNameA
SetProcessWindowStation
GetCursor
GetClipboardSequenceNumber
ArrangeIconicWindows
LoadCursorFromFileA
ImpersonateDdeClientWindow
SetParent
ShowScrollBar
UnpackDDElParam
RegisterWindowMessageA
DestroyIcon
InvalidateRect
OemToCharW
GetLastActivePopup
GetDCEx
MoveWindow
GetMenuItemRect
CharLowerBuffW
GetMenuDefaultItem
MapDialogRect
GetKeyboardState
LoadImageW
LoadBitmapW
SetMenuItemInfoA
VkKeyScanA
SetClipboardData
GetMessageA
ChangeClipboardChain
DdeFreeDataHandle
GetClipboardFormatNameW
SetWindowLongA
SetClassLongA
IsIconic
DefWindowProcW
PostThreadMessageA
ReleaseCapture
LoadImageA
DialogBoxParamW
TrackPopupMenu
GetWindowPlacement
IsDialogMessageA
DefDlgProcW
GetDesktopWindow
CharUpperBuffA
ScrollWindowEx
DlgDirSelectComboBoxExA
CloseWindow
GetMenuItemInfoW
DdeUninitialize
FindWindowA
wvsprintfA
SendIMEMessageExA

shell32

SHEmptyRecycleBinA
ShellExecuteW
SHGetFolderPathA
DragQueryFile
DragQueryFileA
SHLoadNonloadedIconOverlayIdentifiers
ExtractAssociatedIconA
SHBrowseForFolderA
ExtractIconExA
SHGetSpecialFolderPathW
SHGetDiskFreeSpaceA
SHCreateDirectoryExW
FindExecutableA
SHCreateDirectoryExA
SHGetIconOverlayIndexW
SHCreateProcessAsUserW
SHPathPrepareForWriteA
SHInvokePrinterCommandW
SHBrowseForFolderW
SHGetDesktopFolder
SHBrowseForFolder
SHGetPathFromIDListW
SHGetSettings
SHGetFolderPathW
SHGetDiskFreeSpaceExW
SHAppBarMessage
SHGetDataFromIDListW
ShellExecuteExW
ExtractIconW
SHPathPrepareForWriteW
DuplicateIcon
SHGetPathFromIDListA
DragFinish

shlwapi

StrStrIW
StrRChrA
StrStrW

Sections

.text
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90c5e8b803f6840f6b45ca4657761447

Code Sign

73:17:67:48:fd:ee:5c:4d:bc:8a:27:87:b8:6e:5f:a1Certificate

Extended Key Usages

f0:0c:69:9a:ae:40:c7:08:72:11:c2:67:f6:af:fd:62:9b:7b:48:99Signer

Headers

File Characteristics

Imports

kernel32

user32

shell32

shlwapi

Sections

.text Size: 290KB - Virtual size: 289KB

.text3 Size: 1024B - Virtual size: 1000B

.text2 Size: 1024B - Virtual size: 968B

.data Size: 7KB - Virtual size: 6KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

73:17:67:48:fd:ee:5c:4d:bc:8a:27:87:b8:6e:5f:a1
Certificate

f0:0c:69:9a:ae:40:c7:08:72:11:c2:67:f6:af:fd:62:9b:7b:48:99
Signer

.text
Size: 290KB - Virtual size: 289KB

.text3
Size: 1024B - Virtual size: 1000B

.text2
Size: 1024B - Virtual size: 968B

.data
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB