083f08e7cd72373881bfb99d7408db69_JaffaCakes118

General

Target
083f08e7cd72373881bfb99d7408db69_JaffaCakes118
Size 9.5MB
Sample241002-btf3lszfpq
SHA256 a66fac899cb33805bb161f62846f828df454ab9ad2c6a90ead23a0f068c3c1c9
MD5 083f08e7cd72373881bfb99d7408db69
SHA1 6b75114f0b2b41c6346eb2fd78c577a458caa633
SHA512 39be0772769fb206a2d233609b04b60c8d61dd2f223492941200aa2d673becadd85e6c7c0010cfdb06322857bf72ce7b1cd9617be87e05745021702cbe324a72
SSDEEP 196608:sVnVadVeEepGvsH04yZwHBI+SHCEVnVadVeEepGvsH04yZwHBI+SHCkVnVadVeEJ:sVnVaa7HBIBCEVnVaa7HBIBCkVnVaa74
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

083f08e7cd72373881bfb99d7408db69_JaffaCakes118

.dll 9.5MB

083f08e7cd72373881bfb99d7408db69_JaffaCakes118

IMPHASH 59e53f314b9521292a6438b9b55f6ef0
SHA256 a66fac899cb33805bb161f62846f828df454ab9ad2c6a90ead23a0f068c3c1c9
MD5 083f08e7cd72373881bfb99d7408db69
SHA1 6b75114f0b2b41c6346eb2fd78c577a458caa633
SHA512 39be0772769fb206a2d233609b04b60c8d61dd2f223492941200aa2d673becadd85e6c7c0010cfdb06322857bf72ce7b1cd9617be87e05745021702cbe324a72
SSDEEP 196608:sVnVadVeEepGvsH04yZwHBI+SHCEVnVadVeEepGvsH04yZwHBI+SHCkVnVadVeEJ:sVnVaa7HBIBCEVnVaa7HBIBCkVnVaa74
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

25:f6:05:89:a6:bf:87:89:13:71:86:97:36:ea:db:8c:bd:78:13:de

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 30, 2024

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Serial Number

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2008

Subject

Serial Number

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

Issuer

Timespan

Jan 10, 1997 - Dec 31, 2020

Subject

Serial Number

6a:0b:99:4f:c0:00:0c:ab:11:d8:22:ef:7d:6c:79:7e

Issuer

Key Usages

KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 23, 2002 - Sep 25, 2011

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:05:87:58:00:03:00:00:00:5a

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 5, 2005 - Apr 5, 2006

Minor OS version

2

Major OS version

5

Entry point

2183020

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d3dx9_30.pdb

msvcrt

_onexit __dllonexit _except_handler3 ?terminate@@YAXXZ _adjust_fdiv _initterm srand strtod fread fflush fwrite abort sprintf strncpy _tempnam exit atol _ultoa wcstombs rand isxdigit atof _CIcosh _CIexp _CIsinh _CItanh _fpclass strchr _isnan isalnum isalpha toupper tolower atoi floor _strtime _strdate sscanf isspace isdigit _setjmp3 longjmp ldexp frexp _clearfp wcslen calloc realloc malloc _CIsqrt setlocale _strdup free ceil _controlfp _vsnprintf _CIasin __CxxFrameHandler _finite _CIacos memmove qsort _CIfmod _purecall _stricmp modf iswspace iswalpha iswdigit iswpunct _CIpow ??2@YAPAXI@Z ??3@YAXPAX@Z

gdi32

TranslateCharsetInfo ExtTextOutW GetCurrentObject ExtTextOutA CreateCompatibleDC SetMapMode GetOutlineTextMetricsA GetGlyphOutlineW MoveToEx CreateFontIndirectW SetTextAlign CreateFontIndirectA GetFontLanguageInfo GetTextMetricsW SetBkMode SetBkColor SetTextColor GetCharacterPlacementW GetCharacterPlacementA SelectObject DeleteObject DeleteDC CreateDIBSection GetGlyphOutlineA GetTextMetricsA GetObjectW GetObjectA

kernel32

DeleteFileW GetFileSize CreateFileMappingA MapViewOfFile UnmapViewOfFile FindResourceA LoadResource LockResource SizeofResource FreeResource CompareStringA CreateFileW GetLastError FormatMessageA LocalFree GetFullPathNameA LeaveCriticalSection DeleteCriticalSection InterlockedCompareExchange SetFilePointer InitializeCriticalSection InterlockedExchange EnterCriticalSection lstrcmpiA IsDBCSLeadByte WriteFile GetTempPathA GetTempFileNameA CreateFileA ReadFile CloseHandle DeleteFileA InterlockedDecrement InterlockedIncrement IsProcessorFeaturePresent GetSystemInfo VirtualAlloc VirtualFree GetACP WideCharToMultiByte MultiByteToWideChar OutputDebugStringA GetModuleHandleA MoveFileA MoveFileW GetTempFileNameW GlobalMemoryStatus FreeLibrary SetEndOfFile ExpandEnvironmentStringsA IsBadWritePtr IsBadReadPtr IsBadCodePtr CreateMutexA WaitForSingleObject ReleaseMutex HeapAlloc GetProcessHeap HeapFree FindResourceW QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep DisableThreadLibraryCalls GetVersionExA LoadLibraryA GetProcAddress

advapi32

RegCloseKey RegOpenKeyA RegQueryValueExA

D3DXAssembleShader D3DXAssembleShaderFromFileA D3DXAssembleShaderFromFileW D3DXAssembleShaderFromResourceA D3DXAssembleShaderFromResourceW D3DXBoxBoundProbe D3DXCheckCubeTextureRequirements D3DXCheckTextureRequirements D3DXCheckVersion D3DXCheckVolumeTextureRequirements D3DXCleanMesh D3DXColorAdjustContrast D3DXColorAdjustSaturation D3DXCompileShader D3DXCompileShaderFromFileA D3DXCompileShaderFromFileW D3DXCompileShaderFromResourceA D3DXCompileShaderFromResourceW D3DXComputeBoundingBox D3DXComputeBoundingSphere D3DXComputeIMTFromPerTexelSignal D3DXComputeIMTFromPerVertexSignal D3DXComputeIMTFromSignal D3DXComputeIMTFromTexture D3DXComputeNormalMap D3DXComputeNormals D3DXComputeTangent D3DXComputeTangentFrame D3DXComputeTangentFrameEx D3DXConcatenateMeshes D3DXConvertMeshSubsetToSingleStrip D3DXConvertMeshSubsetToStrips D3DXCpuOptimizations D3DXCreateAnimationController D3DXCreateBox D3DXCreateBuffer D3DXCreateCompressedAnimationSet D3DXCreateCubeTexture D3DXCreateCubeTextureFromFileA D3DXCreateCubeTextureFromFileExA D3DXCreateCubeTextureFromFileExW D3DXCreateCubeTextureFromFileInMemory D3DXCreateCubeTextureFromFileInMemoryEx D3DXCreateCubeTextureFromFileW D3DXCreateCubeTextureFromResourceA D3DXCreateCubeTextureFromResourceExA D3DXCreateCubeTextureFromResourceExW D3DXCreateCubeTextureFromResourceW D3DXCreateCylinder D3DXCreateEffect D3DXCreateEffectCompiler D3DXCreateEffectCompilerFromFileA D3DXCreateEffectCompilerFromFileW D3DXCreateEffectCompilerFromResourceA D3DXCreateEffectCompilerFromResourceW D3DXCreateEffectEx D3DXCreateEffectFromFileA D3DXCreateEffectFromFileExA D3DXCreateEffectFromFileExW D3DXCreateEffectFromFileW D3DXCreateEffectFromResourceA D3DXCreateEffectFromResourceExA D3DXCreateEffectFromResourceExW D3DXCreateEffectFromResourceW D3DXCreateEffectPool D3DXCreateFontA D3DXCreateFontIndirectA D3DXCreateFontIndirectW D3DXCreateFontW D3DXCreateFragmentLinker D3DXCreateKeyframedAnimationSet D3DXCreateLine D3DXCreateMatrixStack D3DXCreateMesh D3DXCreateMeshFVF D3DXCreateNPatchMesh D3DXCreatePMeshFromStream D3DXCreatePRTBuffer D3DXCreatePRTBufferTex D3DXCreatePRTCompBuffer D3DXCreatePRTEngine D3DXCreatePatchMesh D3DXCreatePolygon D3DXCreateRenderToEnvMap D3DXCreateRenderToSurface D3DXCreateSPMesh D3DXCreateSkinInfo D3DXCreateSkinInfoFVF D3DXCreateSkinInfoFromBlendedMesh D3DXCreateSphere D3DXCreateSprite D3DXCreateTeapot D3DXCreateTextA D3DXCreateTextW D3DXCreateTexture D3DXCreateTextureFromFileA D3DXCreateTextureFromFileExA D3DXCreateTextureFromFileExW D3DXCreateTextureFromFileInMemory D3DXCreateTextureFromFileInMemoryEx D3DXCreateTextureFromFileW D3DXCreateTextureFromResourceA D3DXCreateTextureFromResourceExA D3DXCreateTextureFromResourceExW D3DXCreateTextureFromResourceW D3DXCreateTextureGutterHelper D3DXCreateTextureShader D3DXCreateTorus D3DXCreateVolumeTexture D3DXCreateVolumeTextureFromFileA D3DXCreateVolumeTextureFromFileExA D3DXCreateVolumeTextureFromFileExW D3DXCreateVolumeTextureFromFileInMemory D3DXCreateVolumeTextureFromFileInMemoryEx D3DXCreateVolumeTextureFromFileW D3DXCreateVolumeTextureFromResourceA D3DXCreateVolumeTextureFromResourceExA D3DXCreateVolumeTextureFromResourceExW D3DXCreateVolumeTextureFromResourceW D3DXDebugMute D3DXDeclaratorFromFVF D3DXDisassembleEffect D3DXDisassembleShader D3DXFVFFromDeclarator D3DXFileCreate D3DXFillCubeTexture D3DXFillCubeTextureTX D3DXFillTexture D3DXFillTextureTX D3DXFillVolumeTexture D3DXFillVolumeTextureTX D3DXFilterTexture D3DXFindShaderComment D3DXFloat16To32Array D3DXFloat32To16Array D3DXFrameAppendChild D3DXFrameCalculateBoundingSphere D3DXFrameDestroy D3DXFrameFind D3DXFrameNumNamedMatrices D3DXFrameRegisterNamedMatrices D3DXFresnelTerm D3DXGatherFragments D3DXGatherFragmentsFromFileA D3DXGatherFragmentsFromFileW D3DXGatherFragmentsFromResourceA D3DXGatherFragmentsFromResourceW D3DXGenerateOutputDecl D3DXGeneratePMesh D3DXGetDeclLength D3DXGetDeclVertexSize D3DXGetDriverLevel D3DXGetFVFVertexSize D3DXGetImageInfoFromFileA D3DXGetImageInfoFromFileInMemory D3DXGetImageInfoFromFileW D3DXGetImageInfoFromResourceA D3DXGetImageInfoFromResourceW D3DXGetPixelShaderProfile D3DXGetShaderConstantTable D3DXGetShaderInputSemantics D3DXGetShaderOutputSemantics D3DXGetShaderSamplers D3DXGetShaderSize D3DXGetShaderVersion D3DXGetTargetDescByName D3DXGetTargetDescByVersion D3DXGetVertexShaderProfile D3DXIntersect D3DXIntersectSubset D3DXIntersectTri D3DXLoadMeshFromXA D3DXLoadMeshFromXInMemory D3DXLoadMeshFromXResource D3DXLoadMeshFromXW D3DXLoadMeshFromXof D3DXLoadMeshHierarchyFromXA D3DXLoadMeshHierarchyFromXInMemory D3DXLoadMeshHierarchyFromXW D3DXLoadPRTBufferFromFileA D3DXLoadPRTBufferFromFileW D3DXLoadPRTCompBufferFromFileA D3DXLoadPRTCompBufferFromFileW D3DXLoadPatchMeshFromXof D3DXLoadSkinMeshFromXof D3DXLoadSurfaceFromFileA D3DXLoadSurfaceFromFileInMemory D3DXLoadSurfaceFromFileW D3DXLoadSurfaceFromMemory D3DXLoadSurfaceFromResourceA D3DXLoadSurfaceFromResourceW D3DXLoadSurfaceFromSurface D3DXLoadVolumeFromFileA D3DXLoadVolumeFromFileInMemory D3DXLoadVolumeFromFileW D3DXLoadVolumeFromMemory D3DXLoadVolumeFromResourceA D3DXLoadVolumeFromResourceW D3DXLoadVolumeFromVolume D3DXMatrixAffineTransformation D3DXMatrixAffineTransformation2D D3DXMatrixDecompose D3DXMatrixDeterminant D3DXMatrixInverse D3DXMatrixLookAtLH D3DXMatrixLookAtRH D3DXMatrixMultiply D3DXMatrixMultiplyTranspose D3DXMatrixOrthoLH D3DXMatrixOrthoOffCenterLH D3DXMatrixOrthoOffCenterRH D3DXMatrixOrthoRH D3DXMatrixPerspectiveFovLH D3DXMatrixPerspectiveFovRH D3DXMatrixPerspectiveLH D3DXMatrixPerspectiveOffCenterLH D3DXMatrixPerspectiveOffCenterRH D3DXMatrixPerspectiveRH D3DXMatrixReflect D3DXMatrixRotationAxis D3DXMatrixRotationQuaternion D3DXMatrixRotationX D3DXMatrixRotationY D3DXMatrixRotationYawPitchRoll D3DXMatrixRotationZ D3DXMatrixScaling D3DXMatrixShadow D3DXMatrixTransformation D3DXMatrixTransformation2D D3DXMatrixTranslation D3DXMatrixTranspose D3DXOptimizeFaces D3DXOptimizeVertices D3DXPlaneFromPointNormal D3DXPlaneFromPoints D3DXPlaneIntersectLine D3DXPlaneNormalize D3DXPlaneTransform D3DXPlaneTransformArray D3DXPreprocessShader D3DXPreprocessShaderFromFileA D3DXPreprocessShaderFromFileW D3DXPreprocessShaderFromResourceA D3DXPreprocessShaderFromResourceW D3DXQuaternionBaryCentric D3DXQuaternionExp D3DXQuaternionInverse D3DXQuaternionLn D3DXQuaternionMultiply D3DXQuaternionNormalize D3DXQuaternionRotationAxis D3DXQuaternionRotationMatrix D3DXQuaternionRotationYawPitchRoll D3DXQuaternionSlerp D3DXQuaternionSquad D3DXQuaternionSquadSetup D3DXQuaternionToAxisAngle D3DXRectPatchSize D3DXSHAdd D3DXSHDot D3DXSHEvalConeLight D3DXSHEvalDirection D3DXSHEvalDirectionalLight D3DXSHEvalHemisphereLight D3DXSHEvalSphericalLight D3DXSHPRTCompSplitMeshSC D3DXSHPRTCompSuperCluster D3DXSHProjectCubeMap D3DXSHRotate D3DXSHRotateZ D3DXSHScale D3DXSaveMeshHierarchyToFileA D3DXSaveMeshHierarchyToFileW D3DXSaveMeshToXA D3DXSaveMeshToXW D3DXSavePRTBufferToFileA D3DXSavePRTBufferToFileW D3DXSavePRTCompBufferToFileA D3DXSavePRTCompBufferToFileW D3DXSaveSurfaceToFileA D3DXSaveSurfaceToFileInMemory D3DXSaveSurfaceToFileW D3DXSaveTextureToFileA D3DXSaveTextureToFileInMemory D3DXSaveTextureToFileW D3DXSaveVolumeToFileA D3DXSaveVolumeToFileInMemory D3DXSaveVolumeToFileW D3DXSimplifyMesh D3DXSphereBoundProbe D3DXSplitMesh D3DXTessellateNPatches D3DXTessellateRectPatch D3DXTessellateTriPatch D3DXTriPatchSize D3DXUVAtlasCreate D3DXUVAtlasPack D3DXUVAtlasPartition D3DXValidMesh D3DXValidPatchMesh D3DXVec2BaryCentric D3DXVec2CatmullRom D3DXVec2Hermite D3DXVec2Normalize D3DXVec2Transform D3DXVec2TransformArray D3DXVec2TransformCoord D3DXVec2TransformCoordArray D3DXVec2TransformNormal D3DXVec2TransformNormalArray D3DXVec3BaryCentric D3DXVec3CatmullRom D3DXVec3Hermite D3DXVec3Normalize D3DXVec3Project D3DXVec3ProjectArray D3DXVec3Transform D3DXVec3TransformArray D3DXVec3TransformCoord D3DXVec3TransformCoordArray D3DXVec3TransformNormal D3DXVec3TransformNormalArray D3DXVec3Unproject D3DXVec3UnprojectArray D3DXVec4BaryCentric D3DXVec4CatmullRom D3DXVec4Cross D3DXVec4Hermite D3DXVec4Normalize D3DXVec4Transform D3DXVec4TransformArray D3DXWeldVertices

Sharing

General

Malware Config

Signatures

File Explorer

083f08e7cd72373881bfb99d7408db69_JaffaCakes118

PE Signature issue

msvcrt

gdi32

kernel32

advapi32

generic