283183b995aaf32574874b413fb2d390_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

283183b995aaf32574874b413fb2d390_JaffaCakes118
Size

45KB
MD5

283183b995aaf32574874b413fb2d390
SHA1

bb02289260eace88aa3effc3df22d47104801c7b
SHA256

18a0db61b0dbaaecea1cf2263925505deb780b2754e7153ada9ae1364a06fda6
SHA512

03b77aa4fb364f6f4cb9ae0be89a15462db859fd8112cae232cc26bd7878c6c770d9f793a815e392c36cfe759405f41a30fbd4bfafbce48f829d18e038dd34b8
SSDEEP

768:wh+EU07TMow93xKIWJryjB8J9M60nnn21V1IVsL/OHOUhmGXJgYsWsqsEjdbkMwV:2X7TDwzyC64nnne/OHO/GZzzMEjHEhhj

Score

1^/10

Malware Config

Signatures

Files

283183b995aaf32574874b413fb2d390_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f4dac984473716ad21646844a438555

Code Sign

10:f6:47:99:b9:2e:f5:4f:ba:c3:28:64:2a:70:0f:e7
Certificate

Issuer

CN=z3t6TXlbXlEE

Not Before

12/03/2012, 08:21

Not After

31/12/2039, 23:59

Subject

CN=z3t6TXlbXlEE

Extended Key Usages

ExtKeyUsageCodeSigning

42:03:e7:5b:47:c9:85:66:19:82:b1:ae:7f:6c:0b:9d:f2:32:16:9b
Signer

Actual PE Digest

42:03:e7:5b:47:c9:85:66:19:82:b1:ae:7f:6c:0b:9d:f2:32:16:9b

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
LoadLibraryW
GetProcAddress
VirtualAlloc
ScrollConsoleScreenBufferW
GetConsoleAliasExesW
DisconnectNamedPipe
HeapAlloc
SwitchToThread
MoveFileWithProgressW
GetACP
PulseEvent
RtlFillMemory
ProcessIdToSessionId
Module32Next
Module32FirstW
SetupComm
GetNumberFormatW
FlushConsoleInputBuffer
InitializeCriticalSectionAndSpinCount
OpenEventA
SetConsoleTextAttribute
TransmitCommChar
SetEndOfFile
SetProcessShutdownParameters
QueryPerformanceCounter
lstrlenW
GetConsoleAliasExesA
GetPrivateProfileSectionW
RtlUnwind
EnumCalendarInfoA
VerifyVersionInfoW
UnlockFile
DisableThreadLibraryCalls
GetCommState
GetFileTime
IsValidCodePage
OpenEventW
CreateConsoleScreenBuffer
DeleteVolumeMountPointW
GetSystemDirectoryW
EnumResourceTypesA
GlobalAlloc
TransactNamedPipe
GlobalUnfix
IsBadStringPtrA
CreateRemoteThread
DeleteFiber
GetVolumePathNameW
CopyFileW
GetNumberFormatA
GetProcessAffinityMask
EnumSystemLocalesW
LocalFileTimeToFileTime
VirtualUnlock
GetSystemTimeAdjustment
SetThreadAffinityMask
_hwrite
GetVolumeInformationA
TlsFree
FreeLibrary
GetFileSize
SetLocaleInfoW
lstrcmpiA
ReadConsoleOutputAttribute
SignalObjectAndWait
TlsAlloc
PeekNamedPipe
GetPrivateProfileStructA
CreateWaitableTimerW
SetProcessPriorityBoost
GetCurrencyFormatW
GetMailslotInfo
GlobalGetAtomNameA
GlobalUnWire
GetComputerNameW
SetThreadExecutionState
AddConsoleAliasA
GetVolumeNameForVolumeMountPointW
lstrcpynW
LocalCompact
FindNextChangeNotification
GetCPInfoExA
GetProcessShutdownParameters
WriteConsoleOutputW
SetHandleCount
MoveFileWithProgressA
GetConsoleTitleA
SetCurrentDirectoryA
GetDiskFreeSpaceExA
DebugActiveProcess
BeginUpdateResourceA
LoadModule
GetThreadLocale

user32

LoadCursorA
GetInputState
GetClipboardFormatNameW
ReleaseCapture
LoadStringW
OpenDesktopA
DdeInitializeW
TileChildWindows
IsWindow
DdeCmpStringHandles
UpdateLayeredWindow
ActivateKeyboardLayout
MoveWindow
AttachThreadInput
SwapMouseButton
ValidateRgn
BeginPaint
EnumPropsA
GetClassInfoW
DrawFrameControl
GetTabbedTextExtentW
DdeKeepStringHandle
MsgWaitForMultipleObjectsEx
MessageBeep
DefWindowProcA
GetPriorityClipboardFormat
SendIMEMessageExW
SetMenuContextHelpId
DdeQueryNextServer
SetActiveWindow
ArrangeIconicWindows
IsRectEmpty
EnumDisplaySettingsA
PostMessageA
MapVirtualKeyExA
IsClipboardFormatAvailable
SetMenuItemBitmaps
InsertMenuA
ReplyMessage
DrawAnimatedRects
GetClipCursor
GetMenuItemInfoA
CharUpperA
HideCaret
SetWindowWord
EnumDisplayDevicesA
SetWindowsHookExA
InvertRect
SetLayeredWindowAttributes
ExcludeUpdateRgn
CreateIcon
GetMenuItemID
DefMDIChildProcW
GetSubMenu
DrawTextExW
GetWindowLongA
LookupIconIdFromDirectory
CharLowerBuffA
GetCaretPos
SetPropA
CreateCaret
CreateDesktopA
SetShellWindow
AppendMenuA
CreateMenu
DlgDirSelectExW
GetMenuItemRect
BroadcastSystemMessageA
SetDebugErrorLevel
CharUpperW
EnumDisplaySettingsExW
FindWindowA
GetUserObjectInformationW
DlgDirListComboBoxW
MessageBoxA
RegisterDeviceNotificationA
TranslateMDISysAccel
RegisterWindowMessageW
LoadMenuIndirectA
ToAsciiEx
CharPrevA
DestroyWindow
ToAscii
SetDlgItemInt
ShowOwnedPopups
GetKBCodePage
SystemParametersInfoW
SetWindowContextHelpId
GetCaretBlinkTime
CharLowerW

gdi32

GetStockObject
GdiDeleteSpoolFileHandle
SetRectRgn
GdiSetAttrs
GetPath
STROBJ_dwGetCodePage
CreateHatchBrush
GdiConvertFont
SetTextColor
CreateRectRgn
OffsetClipRgn
PATHOBJ_vGetBounds
EngTextOut
GetCharABCWidthsI
SetTextAlign
EnumMetaFile
GdiConvertBrush
GetCharWidthI
CopyEnhMetaFileW
CloseEnhMetaFile
GdiPlayDCScript
EngGetCurrentCodePage
GdiGetSpoolMessage
GdiPlayEMF
EnableEUDC
SetPixel
StretchBlt
GetDIBits
GdiConsoleTextOut
GdiInitializeLanguagePack
GetROP2
FONTOBJ_pfdg
GetGlyphOutlineWow
BitBlt
BRUSHOBJ_pvAllocRbrush
AddFontResourceA
CreateBrushIndirect
MaskBlt
CloseMetaFile
EnumFontsA
GetCharWidthW
RectInRegion
GetBitmapBits
GdiConvertBitmap
CloseFigure
GetColorAdjustment
GetTextAlign
CreateDiscardableBitmap
EnumEnhMetaFile
SetMapperFlags
CreatePen
GetWindowOrgEx
GetCharABCWidthsFloatA
SetGraphicsMode
GetTextFaceW
EnumFontFamiliesW
GdiQueryFonts
StrokePath
GdiGetLocalBrush
BeginPath
CreateBitmap
SetMagicColors
SetAbortProc
FloodFill
EngLineTo
GdiValidateHandle
GdiCreateLocalMetaFilePict
LineTo
CreateColorSpaceA
SetWinMetaFileBits
GetCharacterPlacementA
ColorCorrectPalette
GetCurrentObject
GetMiterLimit
Chord
GdiAlphaBlend
GetGlyphOutlineW
GetEnhMetaFileDescriptionW
GetCharWidthA
EngDeleteClip
GetGraphicsMode
GetAspectRatioFilterEx
STROBJ_bGetAdvanceWidths
GdiConvertMetaFilePict
Polygon
AddFontResourceTracking
GetRgnBox
LineDDA
CreateHalftonePalette
PATHOBJ_vEnumStartClipLines
EngMultiByteToUnicodeN
PaintRgn
FillPath
GetTextExtentPoint32W
GetBkMode
GetDCBrushColor
NamedEscape

advapi32

RegOpenKeyExA

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f4dac984473716ad21646844a438555

Code Sign

10:f6:47:99:b9:2e:f5:4f:ba:c3:28:64:2a:70:0f:e7Certificate

Extended Key Usages

42:03:e7:5b:47:c9:85:66:19:82:b1:ae:7f:6c:0b:9d:f2:32:16:9bSigner

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 28KB - Virtual size: 28KB

.text3 Size: 1024B - Virtual size: 1000B

.text2 Size: 1KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 7KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

10:f6:47:99:b9:2e:f5:4f:ba:c3:28:64:2a:70:0f:e7
Certificate

42:03:e7:5b:47:c9:85:66:19:82:b1:ae:7f:6c:0b:9d:f2:32:16:9b
Signer

.text
Size: 28KB - Virtual size: 28KB

.text3
Size: 1024B - Virtual size: 1000B

.text2
Size: 1KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB