2a81cfd0a9f23c7733324b8f0549ab34_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2a81cfd0a9f23c7733324b8f0549ab34_JaffaCakes118
Size

132KB
MD5

2a81cfd0a9f23c7733324b8f0549ab34
SHA1

0fcd34bce8d45f334bb48c0bb86e3d749bb16602
SHA256

3af013effa0f746178d8d1bb2ae04c58f952b6a79e6a226bcdee47b1fe0172a5
SHA512

4d3ae34463fabcdc33322a3c7801723de47e2499d6e32e8eab220398e47256cd9dd1f344ee6cc6f2eeedc3b58c7f110c04cb7655964de07468e1fc95535a281f
SSDEEP

3072:eTcbT2oBIYmEsSFbeL7Kq0Mm+zuPXL70fbJZ:eTcn7BIYmEDdU/0xkuPXgr

Score

1^/10

Malware Config

Signatures

Files

2a81cfd0a9f23c7733324b8f0549ab34_JaffaCakes118
.dll windows:5 windows x86 arch:x86

aeef06d67172f1a9a994c8d9db87ddcf

Code Sign

05:a8:88:e0:a0:c1:17:5e:bb:58:a1:14:23:ad:53:d1
Certificate

Issuer

CN=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

Not Before

03-11-2012 06:32

Not After

31-12-2039 23:59

Subject

CN=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

Extended Key Usages

ExtKeyUsageCodeSigning

a6:3c:09:51:91:4a:6f:d7:f6:f4:16:cb:c6:69:f7:58:52:27:a4:93
Signer

Actual PE Digest

a6:3c:09:51:91:4a:6f:d7:f6:f4:16:cb:c6:69:f7:58:52:27:a4:93

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

UnhandledExceptionFilter
TerminateProcess
SetUnhandledExceptionFilter
SetLastError
SetFilePointer
ReadFile
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentProcess
GetComputerNameW
GetModuleHandleA
CreateFileW
GetSystemTime
LoadLibraryA
GetProcAddress
GetModuleHandleW

advapi32

GetSidSubAuthority
TrusteeAccessToObjectW
SystemFunction034
SystemFunction022
SystemFunction020
SystemFunction014
SystemFunction010
SystemFunction005
SystemFunction002
StartServiceCtrlDispatcherW
StartServiceCtrlDispatcherA
SetUserFileEncryptionKey
SetSecurityInfoExW
SetSecurityDescriptorSacl
SetNamedSecurityInfoExW
SetNamedSecurityInfoExA
RegisterTraceGuidsW
RegisterEventSourceW
RegReplaceKeyW
RegOpenKeyW
AccessCheckByType
AccessCheckByTypeResultListAndAuditAlarmByHandleA
AccessCheckByTypeResultListAndAuditAlarmW
AddAccessAllowedAceEx
AddAccessDeniedAceEx
BackupEventLogW
BuildTrusteeWithObjectsAndSidW
ChangeServiceConfig2W
ChangeServiceConfigA
CloseEventLog
CloseServiceHandle
ConvertSecurityDescriptorToStringSecurityDescriptorA
ConvertStringSDToSDRootDomainA
ConvertStringSecurityDescriptorToSecurityDescriptorA
CreateRestrictedToken
CreateTraceInstanceId
CryptEncrypt
CryptEnumProviderTypesW
CryptExportKey
CryptGetKeyParam
CryptGetProvParam
CryptSetProvParam
CryptSignHashA
CryptSignHashW
DeleteService
DuplicateEncryptionInfoFile
DuplicateToken
DuplicateTokenEx
EnumDependentServicesW
EnumServiceGroupW
GetAclInformation
GetEffectiveRightsFromAclW
GetEventLogInformation
GetMultipleTrusteeA
GetMultipleTrusteeOperationW
GetNamedSecurityInfoExA
GetSecurityDescriptorOwner
RegReplaceKeyA
ImpersonateLoggedOnUser
LogonUserA
LsaAddAccountRights
LsaCreateSecret
LsaCreateTrustedDomainEx
LsaEnumerateAccounts
LsaEnumerateAccountsWithUserRight
LsaICLookupSids
LsaOpenTrustedDomainByName
LsaQuerySecurityObject
LsaSetQuotasForAccount
LsaStorePrivateData
MakeAbsoluteSD2
ObjectCloseAuditAlarmA
ObjectOpenAuditAlarmA
ObjectPrivilegeAuditAlarmA
OpenThreadToken
PrivilegeCheck
QueryAllTracesA
QueryAllTracesW
ReadEventLogA
ReadEventLogW
RegCloseKey
RegConnectRegistryA
RegDisablePredefinedCache
RegFlushKey
RegLoadKeyA
RegNotifyChangeKeyValue
RegOverridePredefKey
RegQueryMultipleValuesW
RegQueryValueA
RegQueryValueExA
RegQueryValueExW
RegQueryValueW

ole32

OleInitialize
DoDragDrop

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aeef06d67172f1a9a994c8d9db87ddcf

Code Sign

05:a8:88:e0:a0:c1:17:5e:bb:58:a1:14:23:ad:53:d1Certificate

Extended Key Usages

a6:3c:09:51:91:4a:6f:d7:f6:f4:16:cb:c6:69:f7:58:52:27:a4:93Signer

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

Sections

.text Size: 3KB - Virtual size: 3KB

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 113KB - Virtual size: 112KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 1KB - Virtual size: 1KB

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 1024B - Virtual size: 1000B

.rsrc Size: 1024B - Virtual size: 632B

.reloc Size: 1024B - Virtual size: 942B

05:a8:88:e0:a0:c1:17:5e:bb:58:a1:14:23:ad:53:d1
Certificate

a6:3c:09:51:91:4a:6f:d7:f6:f4:16:cb:c6:69:f7:58:52:27:a4:93
Signer

.text
Size: 3KB - Virtual size: 3KB

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 113KB - Virtual size: 112KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 1KB - Virtual size: 1KB

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 1024B - Virtual size: 632B

.reloc
Size: 1024B - Virtual size: 942B