289b93c708165acc413486841474d150_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

289b93c708165acc413486841474d150_JaffaCakes118
Size

46KB
MD5

289b93c708165acc413486841474d150
SHA1

f5129ff938d74f6ba27ffb67bfce1c45dd9325f8
SHA256

515b337437b8a9eafabe6246e1e10eaa4dfbd9d10fb9c44b86c85a362dab132b
SHA512

38db7ae2ca32da33de4e72ed09480785e6161666a5af51efcba3c8b550d6fb6e092b380a7ee574e04f40dc25c3a205244224a342ec975d406775aa0eb83ed42a
SSDEEP

768:yTKtKeFToOAjNG4uRX1MEaMJg5s2sesEjdbkMwEMhhee+N:NFUOAQt3ebYEjHYhhee+N

Score

1^/10

Malware Config

Signatures

Files

289b93c708165acc413486841474d150_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e8da8a340b9da5b774442f9704a68b06

Code Sign

73:17:67:48:fd:ee:5c:4d:bc:8a:27:87:b8:6e:5f:a1
Certificate

Issuer

CN=drVoA01yoqkQ

Not Before

14/03/2012, 05:55

Not After

31/12/2039, 23:59

Subject

CN=drVoA01yoqkQ

Extended Key Usages

ExtKeyUsageCodeSigning

bb:fb:b3:35:58:d3:fe:66:09:68:1d:34:e9:4b:9e:b9:a0:11:6e:06
Signer

Actual PE Digest

bb:fb:b3:35:58:d3:fe:66:09:68:1d:34:e9:4b:9e:b9:a0:11:6e:06

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
LoadLibraryW
GetProcAddress
ScrollConsoleScreenBufferW
GetConsoleAliasExesW
DisconnectNamedPipe
HeapAlloc
SwitchToThread
MoveFileWithProgressW
GetACP
PulseEvent
RtlFillMemory
ProcessIdToSessionId
Module32Next
Module32FirstW
SetupComm
GetNumberFormatW
FlushConsoleInputBuffer
InitializeCriticalSectionAndSpinCount
OpenEventA
SetConsoleTextAttribute
TransmitCommChar
SetEndOfFile
SetProcessShutdownParameters
QueryPerformanceCounter
lstrlenW
GetConsoleAliasExesA
GetPrivateProfileSectionW
RtlUnwind
EnumCalendarInfoA
VerifyVersionInfoW
UnlockFile
DisableThreadLibraryCalls
GetCommState
GetFileTime
IsValidCodePage
OpenEventW
CreateConsoleScreenBuffer
DeleteVolumeMountPointW
GetSystemDirectoryW
EnumResourceTypesA
GlobalAlloc
TransactNamedPipe
GlobalUnfix
IsBadStringPtrA
CreateRemoteThread
DeleteFiber
GetVolumePathNameW
CopyFileW
GetNumberFormatA
GetProcessAffinityMask
EnumSystemLocalesW
LocalFileTimeToFileTime
VirtualUnlock
GetSystemTimeAdjustment
SetThreadAffinityMask
_hwrite
GetVolumeInformationA
TlsFree
FreeLibrary
GetFileSize
SetLocaleInfoW
lstrcmpiA
ReadConsoleOutputAttribute
SignalObjectAndWait
TlsAlloc
PeekNamedPipe
GetPrivateProfileStructA
CreateWaitableTimerW
SetProcessPriorityBoost
GetCurrencyFormatW
GetMailslotInfo
GlobalGetAtomNameA
GlobalUnWire
GetComputerNameW
SetThreadExecutionState
AddConsoleAliasA
GetVolumeNameForVolumeMountPointW
lstrcpynW
LocalCompact
FindNextChangeNotification
GetCPInfoExA
GetProcessShutdownParameters
WriteConsoleOutputW
SetHandleCount
MoveFileWithProgressA
GetConsoleTitleA
SetCurrentDirectoryA
GetDiskFreeSpaceExA
DebugActiveProcess
BeginUpdateResourceA
LoadModule
GetThreadLocale

user32

LoadCursorA
GetInputState
GetClipboardFormatNameW
ReleaseCapture
LoadStringW
OpenDesktopA
DdeInitializeW
TileChildWindows
IsWindow
DdeCmpStringHandles
UpdateLayeredWindow
ActivateKeyboardLayout
MoveWindow
AttachThreadInput
SwapMouseButton
ValidateRgn
BeginPaint
EnumPropsA
GetClassInfoW
DrawFrameControl
GetTabbedTextExtentW
DdeKeepStringHandle
MsgWaitForMultipleObjectsEx
MessageBeep
DefWindowProcA
GetPriorityClipboardFormat
SendIMEMessageExW
SetMenuContextHelpId
DdeQueryNextServer
SetActiveWindow
ArrangeIconicWindows
IsRectEmpty
EnumDisplaySettingsA
PostMessageA
MapVirtualKeyExA
IsClipboardFormatAvailable
SetMenuItemBitmaps
InsertMenuA
ReplyMessage
DrawAnimatedRects
GetClipCursor
GetMenuItemInfoA
CharUpperA
HideCaret
SetWindowWord
EnumDisplayDevicesA
SetWindowsHookExA
InvertRect
SetLayeredWindowAttributes
ExcludeUpdateRgn
CreateIcon
GetMenuItemID
DefMDIChildProcW
GetSubMenu
DrawTextExW
GetWindowLongA
LookupIconIdFromDirectory
CharLowerBuffA
GetCaretPos
SetPropA
CreateCaret
CreateDesktopA
SetShellWindow
AppendMenuA
CreateMenu
DlgDirSelectExW
GetMenuItemRect
BroadcastSystemMessageA
SetDebugErrorLevel
CharUpperW
EnumDisplaySettingsExW
FindWindowA
GetUserObjectInformationW
DlgDirListComboBoxW
MessageBoxA
RegisterDeviceNotificationA
TranslateMDISysAccel
RegisterWindowMessageW
LoadMenuIndirectA
ToAsciiEx
CharPrevA
DestroyWindow
ToAscii
SetDlgItemInt
ShowOwnedPopups
GetKBCodePage
SystemParametersInfoW
SetWindowContextHelpId
GetCaretBlinkTime
CharLowerW

gdi32

GetStockObject
GdiDeleteSpoolFileHandle
SetRectRgn
GdiSetAttrs
GetPath
STROBJ_dwGetCodePage
CreateHatchBrush
GdiConvertFont
SetTextColor
CreateRectRgn
OffsetClipRgn
PATHOBJ_vGetBounds
EngTextOut
GetCharABCWidthsI
SetTextAlign
EnumMetaFile
GdiConvertBrush
GetCharWidthI
CopyEnhMetaFileW
CloseEnhMetaFile
GdiPlayDCScript
EngGetCurrentCodePage
GdiGetSpoolMessage
GdiPlayEMF
EnableEUDC
SetPixel
StretchBlt
GetDIBits
GdiConsoleTextOut
GdiInitializeLanguagePack
GetROP2
FONTOBJ_pfdg
GetGlyphOutlineWow
BitBlt
BRUSHOBJ_pvAllocRbrush
AddFontResourceA
CreateBrushIndirect
MaskBlt
CloseMetaFile
EnumFontsA
GetCharWidthW
RectInRegion
GetBitmapBits
GdiConvertBitmap
CloseFigure
GetColorAdjustment
GetTextAlign
CreateDiscardableBitmap
EnumEnhMetaFile
SetMapperFlags
CreatePen
GetWindowOrgEx
GetCharABCWidthsFloatA
SetGraphicsMode
GetTextFaceW
EnumFontFamiliesW
GdiQueryFonts
StrokePath
GdiGetLocalBrush
BeginPath
CreateBitmap
SetMagicColors
SetAbortProc
FloodFill
EngLineTo
GdiValidateHandle
GdiCreateLocalMetaFilePict
LineTo
CreateColorSpaceA
SetWinMetaFileBits
GetCharacterPlacementA
ColorCorrectPalette
GetCurrentObject
GetMiterLimit
Chord
GdiAlphaBlend
GetGlyphOutlineW
GetEnhMetaFileDescriptionW
GetCharWidthA
EngDeleteClip
GetGraphicsMode
GetAspectRatioFilterEx
STROBJ_bGetAdvanceWidths
GdiConvertMetaFilePict
Polygon
AddFontResourceTracking
GetRgnBox
LineDDA
CreateHalftonePalette
PATHOBJ_vEnumStartClipLines
EngMultiByteToUnicodeN
PaintRgn
FillPath
GetTextExtentPoint32W
GetBkMode
GetDCBrushColor
NamedEscape

advapi32

RegOpenKeyExA

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e8da8a340b9da5b774442f9704a68b06

Code Sign

73:17:67:48:fd:ee:5c:4d:bc:8a:27:87:b8:6e:5f:a1Certificate

Extended Key Usages

bb:fb:b3:35:58:d3:fe:66:09:68:1d:34:e9:4b:9e:b9:a0:11:6e:06Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 29KB - Virtual size: 28KB

.text3 Size: 1024B - Virtual size: 1000B

.text2 Size: 1KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 7KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

73:17:67:48:fd:ee:5c:4d:bc:8a:27:87:b8:6e:5f:a1
Certificate

bb:fb:b3:35:58:d3:fe:66:09:68:1d:34:e9:4b:9e:b9:a0:11:6e:06
Signer

.text
Size: 29KB - Virtual size: 28KB

.text3
Size: 1024B - Virtual size: 1000B

.text2
Size: 1KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB