2d51f2695c7ca97e33a9ba73e36d7c18_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2d51f2695c7ca97e33a9ba73e36d7c18_JaffaCakes118
Size

256KB
MD5

2d51f2695c7ca97e33a9ba73e36d7c18
SHA1

359a28ed18b72a39ff64b494a925ec895da65290
SHA256

3ed92aff02b1769a35e646efea74e757a2472101bf687330ccd035cc718c9c8b
SHA512

b9937d276eef385e8a06207cadf33af91245c91966b184f9dd06efc463e895f4ca718f4d8d29de3a639477416d591b7099dff9e9419b82e451332d0299d7c747
SSDEEP

6144:woG2bGk9jZR3ovtbJTDYaZTj+bgphUadS9:wAxz3IFJTDYcBrUa

Score

1^/10

Malware Config

Signatures

Files

2d51f2695c7ca97e33a9ba73e36d7c18_JaffaCakes118
.dll windows:5 windows x86 arch:x86

53d18b1ab607fecec211f639b5c48ca3

Code Sign

5f:57:ad:23:74:a4:cc:7a:ba:c4:5d:b3:2c:9f:7e:62
Certificate

Issuer

CN=23523512

Not Before

11/02/2012, 05:20

Not After

31/12/2039, 23:59

Subject

CN=23523512

Extended Key Usages

ExtKeyUsageCodeSigning

d5:dc:bf:4c:4f:21:55:95:8f:50:06:e2:4a:57:39:5b:df:28:bf:44
Signer

Actual PE Digest

d5:dc:bf:4c:4f:21:55:95:8f:50:06:e2:4a:57:39:5b:df:28:bf:44

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
ExitProcess
CreateFileA
GetProcAddress
LoadLibraryW
lstrcpyA
lstrlenA
GetWindowsDirectoryA
GetVersion
AddAtomA
AllocateUserPhysicalPages
BackupSeek
BindIoCompletionCallback
BuildCommDCBA
CancelWaitableTimer
ClearCommError
CompareStringW
ContinueDebugEvent
CreateConsoleScreenBuffer
CreateDirectoryExW
CreateEventA
CreateNamedPipeW
CreatePipe
CreateProcessW
CreateRemoteThread
CreateTapePartition
CreateWaitableTimerW
DebugActiveProcess
DefineDosDeviceW
DeleteTimerQueueEx
DnsHostnameToComputerNameA
DuplicateHandle
EnumCalendarInfoExA
EnumResourceTypesW
EnumSystemLocalesW
EnumUILanguagesW
EraseTape
ExpandEnvironmentStringsW
FatalAppExitW
FatalExit
FileTimeToDosDateTime
FillConsoleOutputCharacterA
FindFirstFileA
FindFirstVolumeMountPointW
FindNextFileA
FindNextVolumeA
FormatMessageW
FreeEnvironmentStringsW
FreeLibraryAndExitThread
GenerateConsoleCtrlEvent
GetCPInfo
GetCPInfoExW
GetCommMask
GetCommandLineW
GetCompressedFileSizeA
GetComputerNameExW
GetConsoleAliasExesLengthW
GetConsoleAliasExesW
GetConsoleAliasesLengthW
GetConsoleAliasesW
GetConsoleCP
GetConsoleFontSize
GetConsoleScreenBufferInfo
GetCurrencyFormatA
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDriveTypeA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeThread
GetFileType
GetLargestConsoleWindowSize
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDriveStringsA
GetMailslotInfo
GetModuleFileNameW
GetNumberFormatA
GetNumberFormatW
GetPrivateProfileIntA
GetPrivateProfileStructW
GetProcessHeaps
GetProcessVersion
GetProfileIntA
GetQueuedCompletionStatus
GetShortPathNameA
GetStringTypeExW
GetStringTypeW
GetSystemTime
GetSystemTimeAsFileTime
GetTapeParameters
GetTapePosition
GetThreadLocale
GlobalFindAtomA
GlobalFlags
GlobalFree
GlobalGetAtomNameA
GlobalUnfix
GlobalUnlock
Heap32ListNext
HeapCreate
HeapValidate
InitAtomTable
InitializeCriticalSection
InterlockedExchange
IsBadReadPtr
IsBadStringPtrW
IsBadWritePtr
IsProcessorFeaturePresent
MapUserPhysicalPagesScatter
Module32Next
MoveFileA
OpenEventW
OpenFileMappingW
OpenJobObjectW
OpenMutexW
OpenSemaphoreW
OpenWaitableTimerA
PostQueuedCompletionStatus
Process32NextW
QueryInformationJobObject
QueryPerformanceFrequency
ReadFile
ReadFileEx
ReadFileScatter
ReleaseMutex
RemoveDirectoryA
RemoveDirectoryW
ResetWriteWatch
ScrollConsoleScreenBufferW
SearchPathW
SetCalendarInfoA
SetCommConfig
SetComputerNameExW
SetComputerNameW
SetConsoleCursorInfo
SetConsoleDisplayMode
SetConsoleScreenBufferSize
SetConsoleTitleA
SetErrorMode
SetFileAttributesA
SetFilePointer
SetFileTime
SetHandleCount
SetProcessAffinityMask
SetSystemPowerState
SetThreadLocale
SetVolumeMountPointW
SetWaitableTimer
SignalObjectAndWait
SwitchToThread
SystemTimeToTzSpecificLocalTime
Thread32Next
TlsGetValue
Toolhelp32ReadProcessMemory
TransactNamedPipe
UnhandledExceptionFilter
UnlockFileEx
VerSetConditionMask
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
WaitCommEvent
WaitForMultipleObjects
WaitNamedPipeW
WriteConsoleOutputW
WriteConsoleW
WriteFileEx
WritePrivateProfileSectionW
WritePrivateProfileStringA
WriteProfileStringA
WriteProfileStringW
_llseek
lstrcatW
lstrcpy
lstrcpyW
lstrlen
lstrlenW

user32

AdjustWindowRectEx
AllowSetForegroundWindow
AppendMenuW
AttachThreadInput
BeginPaint
BroadcastSystemMessage
ChangeDisplaySettingsExA
ChangeDisplaySettingsExW
ChangeMenuW
CharNextA
CharPrevExA
CharToOemBuffW
CharUpperBuffA
ClipCursor
CloseClipboard
CopyAcceleratorTableW
CreateAcceleratorTableW
CreateCaret
CreateCursor
CreateDesktopA
CreateDialogIndirectParamA
CreateDialogParamA
CreateIconIndirect
CreateWindowExW
DdeAbandonTransaction
DdeClientTransaction
DdeCmpStringHandles
DdeConnect
DdeConnectList
DdeCreateStringHandleA
DdeFreeDataHandle
DdeKeepStringHandle
DdeQueryNextServer
DdeQueryStringW
DefWindowProcA
DeleteMenu
DestroyAcceleratorTable
DestroyCursor
DestroyIcon
DestroyWindow
DialogBoxParamA
DispatchMessageW
DlgDirSelectComboBoxExA
DlgDirSelectExW
DragObject
DrawCaption
DrawEdge
DrawStateW
DrawTextExA
DrawTextExW
EmptyClipboard
EnableWindow
EndDeferWindowPos
EndDialog
EnumDesktopsA
EnumDisplaySettingsA
EnumPropsExA
EnumWindows
ExcludeUpdateRgn
FindWindowW
FlashWindow
FreeDDElParam
GetAltTabInfo
GetAltTabInfoW
GetAncestor
GetCaretBlinkTime
GetClassInfoA
GetClassLongW
GetClientRect
GetClipboardData
GetClipboardOwner
GetCursorInfo
GetDesktopWindow
GetForegroundWindow
GetIconInfo
GetKeyboardLayoutList
GetKeyboardLayoutNameA
GetKeyboardState
GetLastActivePopup
GetMenuBarInfo
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuState
GetMonitorInfoA
GetOpenClipboardWindow
GetPriorityClipboardFormat
GetPropA
GetSysColor
GetTabbedTextExtentA
GetTitleBarInfo
GetUserObjectInformationW
GetWindowContextHelpId
GetWindowLongA
GetWindowPlacement
GetWindowTextA
GetWindowThreadProcessId
GrayStringA
GrayStringW
HideCaret
IMPSetIMEW
InsertMenuA
InsertMenuItemA
InsertMenuItemW
InsertMenuW
IntersectRect
IsCharAlphaNumericW
IsCharUpperA
IsClipboardFormatAvailable
IsHungAppWindow
IsMenu
LoadCursorFromFileW
LoadImageA
LoadImageW
LockWorkStation
MenuItemFromPoint
MessageBoxIndirectA
MonitorFromRect
MsgWaitForMultipleObjectsEx
OemToCharA
OemToCharBuffA
OemToCharBuffW
OemToCharW
OpenIcon
PeekMessageA
PostThreadMessageA
RealChildWindowFromPoint
RedrawWindow
RegisterClassA
RegisterClassW
RegisterClipboardFormatA
RegisterWindowMessageW
ReleaseDC
RemoveMenu
RemovePropW
ReplyMessage
SendIMEMessageExA
SendMessageA
SendMessageCallbackW
SendMessageTimeoutW
SetCaretBlinkTime
SetClassLongA
SetClipboardViewer
SetCursor
SetCursorPos
SetForegroundWindow
SetKeyboardState
SetMenu
SetMenuContextHelpId
SetMenuInfo
SetMenuItemInfoA
SetMessageQueue
SetProcessDefaultLayout
SetScrollInfo
SetScrollRange
SetUserObjectSecurity
SetWindowRgn
SetWindowWord
SetWindowsHookA
ShowCaret
ShowOwnedPopups
SwitchToThisWindow
TabbedTextOutA
TileChildWindows
ToUnicodeEx
TranslateAccelerator
TranslateMDISysAccel
UnregisterClassW
UnregisterHotKey
UpdateLayeredWindow
UserHandleGrantAccess
VkKeyScanExA
VkKeyScanExW
VkKeyScanW
WINNLSGetEnableStatus
WaitMessage

ole32

BindMoniker
CLIPFORMAT_UserSize
CLIPFORMAT_UserUnmarshal
CLSIDFromProgID
CoAllowSetForegroundWindow
CoBuildVersion
CoCancelCall
CoCreateFreeThreadedMarshaler
CoCreateGuid
CoCreateInstance
CoCreateObjectInContext
CoDosDateTimeToFileTime
CoEnableCallCancellation
CoFileTimeNow
CoFileTimeToDosDateTime
CoFreeLibrary
CoFreeUnusedLibraries
CoGetCallContext
CoGetCallerTID
CoGetClassObject
CoGetClassVersion
CoGetCurrentLogicalThreadId
CoGetInstanceFromFile
CoGetMalloc
CoGetMarshalSizeMax
CoGetStdMarshalEx
CoImpersonateClient
CoInitialize
CoInitializeEx
CoInstall
CoIsOle1Class
CoLockObjectExternal
CoMarshalInterface
CoReactivateObject
CoRegisterClassObject
CoRegisterMessageFilter
CoRegisterPSClsid
CoRegisterSurrogateEx
CoReleaseMarshalData
CoReleaseServerProcess
CoResumeClassObjects
CoRevokeClassObject
CoRevokeMallocSpy
CoSetCancelObject
CoSetProxyBlanket
CoSuspendClassObjects
CoTaskMemRealloc
CoTreatAsClass
CoUninitialize
CoUnloadingWOW
CoUnmarshalInterface
CreateAntiMoniker
CreateBindCtx
CreateClassMoniker
CreateDataAdviseHolder
CreateDataCache
CreateObjrefMoniker
CreateStreamOnHGlobal
DllGetClassObjectWOW
DoDragDrop
FmtIdToPropStgName
GetClassFile
GetConvertStg
GetDocumentBitStg
GetHookInterface
HACCEL_UserFree
HACCEL_UserMarshal
HACCEL_UserSize
HACCEL_UserUnmarshal
HBITMAP_UserFree
HBITMAP_UserMarshal
HBITMAP_UserSize
HBRUSH_UserSize
HBRUSH_UserUnmarshal
HDC_UserFree
HDC_UserMarshal
HDC_UserUnmarshal
HENHMETAFILE_UserFree
HENHMETAFILE_UserMarshal
HGLOBAL_UserSize
HICON_UserMarshal
HICON_UserSize
HICON_UserUnmarshal
HMENU_UserFree
HMENU_UserMarshal
HMENU_UserSize
HMETAFILEPICT_UserFree
HMETAFILEPICT_UserMarshal
HMETAFILEPICT_UserSize
HMETAFILEPICT_UserUnmarshal
HMETAFILE_UserSize
HPALETTE_UserMarshal
HPALETTE_UserSize
HWND_UserFree
HWND_UserMarshal
HWND_UserSize
HWND_UserUnmarshal
IIDFromString
IsAccelerator
IsEqualGUID
MkParseDisplayName
MonikerCommonPrefixWith
MonikerRelativePathTo
OleBuildVersion
OleConvertIStorageToOLESTREAMEx
OleCreate
OleCreateEmbeddingHelper
OleCreateEx
OleCreateFromData
OleCreateFromFile
OleCreateFromFileEx
OleCreateLinkFromData
OleCreateLinkFromDataEx
OleCreateLinkToFileEx
OleDestroyMenuDescriptor
OleGetAutoConvert
OleGetIconOfClass
OleInitializeWOW
OleLoad
OleLockRunning
OleNoteObjectVisible
OleQueryLinkFromData
OleSetAutoConvert
OleSetClipboard
OleSetContainedObject
OleSetMenuDescriptor
OleUninitialize
OpenOrCreateStream
ProgIDFromCLSID
ReadClassStm
ReadFmtUserTypeStg
ReadOleStg
STGMEDIUM_UserMarshal
STGMEDIUM_UserUnmarshal
StgConvertVariantToProperty
StgCreateDocfile
StgCreateDocfileOnILockBytes
StgCreateStorageEx
StgIsStorageFile
StgOpenStorageOnILockBytes
StgSetTimes
StringFromCLSID
UtConvertDvtd16toDvtd32
UtConvertDvtd32toDvtd16
UtGetDvtd32Info
WdtpInterfacePointer_UserSize
WriteClassStg
WriteStringStream

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tex3t2
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text5
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

53d18b1ab607fecec211f639b5c48ca3

Code Sign

5f:57:ad:23:74:a4:cc:7a:ba:c4:5d:b3:2c:9f:7e:62Certificate

Extended Key Usages

d5:dc:bf:4c:4f:21:55:95:8f:50:06:e2:4a:57:39:5b:df:28:bf:44Signer

Headers

File Characteristics

Imports

kernel32

user32

ole32

Sections

.text Size: 16KB - Virtual size: 15KB

.tex3t2 Size: 2KB - Virtual size: 2KB

.text5 Size: 230KB - Virtual size: 229KB

.data Size: 512B - Virtual size: 160B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 2KB

5f:57:ad:23:74:a4:cc:7a:ba:c4:5d:b3:2c:9f:7e:62
Certificate

d5:dc:bf:4c:4f:21:55:95:8f:50:06:e2:4a:57:39:5b:df:28:bf:44
Signer

.text
Size: 16KB - Virtual size: 15KB

.tex3t2
Size: 2KB - Virtual size: 2KB

.text5
Size: 230KB - Virtual size: 229KB

.data
Size: 512B - Virtual size: 160B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 2KB