46043690bc96878b5350a3db94330062_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

46043690bc96878b5350a3db94330062_JaffaCakes118
Size

262KB
MD5

46043690bc96878b5350a3db94330062
SHA1

f4fba57abdc87b23d548f25fb54dad7a6aaa56a4
SHA256

283c2fba118421d4705da481145f820cb7a8a32deed6da60e551b9ac6577373c
SHA512

f6b0bac84e2b9e5b8449ed571f378da93f69f1c1df3a17ed8effd1703a5f1f28891ccc858522cd24dad3cce69baa49e6045a6e89a0b718e5faf884d7d934494b
SSDEEP

3072:DRcApaYmDfmwO0iEZQVulmOloh7It9Ujc18zdf:GAvEDZQklrO3

Score

1^/10

Malware Config

Signatures

Files

46043690bc96878b5350a3db94330062_JaffaCakes118
.dll windows:5 windows x86 arch:x86

1743c059e5e8914231efd0b42d447124

Code Sign

3d:4a:98:4c:4c:26:42:42:bf:7c:4e:8d:c9:be:92:cf
Certificate

Issuer

CN=epamsynntazgyubfcbmlbajheejjpykwrjmjlnhtfnbyztdpezdddcfaygecptzzfzrrdqkcntceeakmpitfmlfbetauqrfstwjjfdnbmouamwaojogetdkrgzgpmvdfelplrjyuysdujdyjkaurgsnwlenwjrrgnbtgbzvbswmwwyxxtzwosbdhfjtbcbjeuwjdkbeisphvoyjyjpftmmodxrcwyipczzkqgepswimimbqwjxxlkswlzxcaucptflanufrzemeiisutvygxwvzsxzmnbnhnpfsqonrooisverqiwpvptkngfoimpbljhcdzvvpmcawasfwwqpodmjzykjxexrnckvjugfjnvsnffxvmirpfcbpjcwxzyqvzecsibhnaujzzjutvekjuafjrwoenfsnauktebzmcexuxlgofjipyhybvhvwntzjypgjxmqmkbcswhebrgwhxoxgicwlwdacavyrjgalhqsvvftuvchtb

Not Before

26-07-2012 16:31

Not After

31-12-2039 23:59

Subject

CN=epamsynntazgyubfcbmlbajheejjpykwrjmjlnhtfnbyztdpezdddcfaygecptzzfzrrdqkcntceeakmpitfmlfbetauqrfstwjjfdnbmouamwaojogetdkrgzgpmvdfelplrjyuysdujdyjkaurgsnwlenwjrrgnbtgbzvbswmwwyxxtzwosbdhfjtbcbjeuwjdkbeisphvoyjyjpftmmodxrcwyipczzkqgepswimimbqwjxxlkswlzxcaucptflanufrzemeiisutvygxwvzsxzmnbnhnpfsqonrooisverqiwpvptkngfoimpbljhcdzvvpmcawasfwwqpodmjzykjxexrnckvjugfjnvsnffxvmirpfcbpjcwxzyqvzecsibhnaujzzjutvekjuafjrwoenfsnauktebzmcexuxlgofjipyhybvhvwntzjypgjxmqmkbcswhebrgwhxoxgicwlwdacavyrjgalhqsvvftuvchtb

Extended Key Usages

ExtKeyUsageCodeSigning

c6:b9:03:ce:ba:d6:20:1c:8c:73:22:22:32:ed:58:83:9d:a9:28:f9
Signer

Actual PE Digest

c6:b9:03:ce:ba:d6:20:1c:8c:73:22:22:32:ed:58:83:9d:a9:28:f9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
GetCommandLineA
GetWindowsDirectoryA
lstrcatA
CloseHandle
VirtualAlloc
CreateFileA

user32

GetAltTabInfo
GetAltTabInfoA
GetAltTabInfoW
GetDlgItemTextA
GetGuiResources
GetKeyNameTextA
GetKeyboardLayoutList
GetMenuItemInfoA
GetPropW
GetUserObjectInformationA
IMPGetIMEW
ImpersonateDdeClientWindow
InSendMessage
InsertMenuA
IsCharAlphaA
IsChild
IsDialogMessageW
IsHungAppWindow
IsMenu
IsWindowVisible
LoadBitmapA
LoadCursorA
LoadCursorW
LoadIconW
LoadImageW
LoadMenuA
LoadMenuIndirectW
LockWorkStation
MenuItemFromPoint
OemToCharBuffA
OpenInputDesktop
PeekMessageW
PtInRect
RegisterDeviceNotificationA
RegisterWindowMessageW
SendMessageA
SendMessageTimeoutA
SendNotifyMessageW
SetCapture
SetCaretPos
SetCursorPos
SetProcessDefaultLayout
SetShellWindow
SetSystemCursor
SetWinEventHook
SetWindowContextHelpId
SetWindowLongW
SetWindowsHookExA
SetWindowsHookW
SwitchToThisWindow
SystemParametersInfoA
TranslateMessage
UnloadKeyboardLayout
WindowFromDC
EnumWindowStationsW
EnumPropsExA
EnumDisplayMonitors
DrawIconEx
DragDetect
DlgDirListA
DefDlgProcA
DdeKeepStringHandle
DdeConnect
DdeClientTransaction
DdeAccessData
CreateDialogParamA
CreateAcceleratorTableA
ChildWindowFromPoint
CharPrevA
ChangeDisplaySettingsA
CascadeChildWindows
AppendMenuA
AnyPopup
EndPaint
BeginPaint
PostQuitMessage
DefWindowProcA
LoadIconA

comdlg32

ChooseFontW
CommDlgExtendedError
ChooseColorW
FindTextW
GetFileTitleA
GetFileTitleW
FindTextA
ChooseFontA
PageSetupDlgW
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
GetOpenFileNameA
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
ChooseColorA

advapi32

RegOpenKeyExW

ole32

CLIPFORMAT_UserSize
CoAllowSetForegroundWindow
CoCopyProxy
CoCreateInstanceEx
CoCreateObjectInContext
CoDisableCallCancellation
CoDisconnectObject
CoFreeAllLibraries
CoFreeUnusedLibraries
CoGetClassObject
CoGetStandardMarshal
CoGetTreatAsClass
CoInitializeEx
CoInstall
CoMarshalHresult
CoMarshalInterface
CoReleaseServerProcess
CoSwitchCallContext
CoTaskMemAlloc
CoTreatAsClass
CreateAntiMoniker
CreateBindCtx
CreateClassMoniker
CreateDataCache
CreateGenericComposite
CreateOleAdviseHolder
CreatePointerMoniker
FmtIdToPropStgName
GetConvertStg
GetHGlobalFromStream
GetHookInterface
HACCEL_UserMarshal
HBITMAP_UserUnmarshal
HBRUSH_UserMarshal
HBRUSH_UserSize
HDC_UserFree
HDC_UserSize
HENHMETAFILE_UserFree
HGLOBAL_UserMarshal
HGLOBAL_UserUnmarshal
HICON_UserSize
HMENU_UserMarshal
HMETAFILEPICT_UserUnmarshal
HMETAFILE_UserFree
HPALETTE_UserFree
HPALETTE_UserUnmarshal
HkOleRegisterObject
IsEqualGUID
MonikerCommonPrefixWith
OleConvertOLESTREAMToIStorageEx
OleCreateEx
OleCreateFromDataEx
OleCreateLink
OleCreateStaticFromData
OleDestroyMenuDescriptor
OleDraw
OleFlushClipboard
OleGetClipboard
OleIsCurrentClipboard
OleMetafilePictFromIconAndLabel
OleQueryCreateFromData
OleQueryLinkFromData
OleRegGetMiscStatus
OleRegGetUserType
OleSetClipboard
OleSetMenuDescriptor
PropStgNameToFmtId
PropVariantCopy
ReadClassStm
ReadOleStg
ReleaseStgMedium
SNB_UserFree
SNB_UserMarshal
SNB_UserUnmarshal
STGMEDIUM_UserSize
SetConvertStg
SetDocumentBitStg
StgConvertVariantToProperty
StgCreatePropSetStg
StgIsStorageFile
StgIsStorageILockBytes
StgOpenPropStg
StgOpenStorageEx
StgSetTimes
UtConvertDvtd16toDvtd32
UtGetDvtd16Info
UtGetDvtd32Info
WdtpInterfacePointer_UserSize
WriteClassStg
WriteClassStm
WriteStringStream

Sections

.text
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1743c059e5e8914231efd0b42d447124

Code Sign

3d:4a:98:4c:4c:26:42:42:bf:7c:4e:8d:c9:be:92:cfCertificate

Extended Key Usages

c6:b9:03:ce:ba:d6:20:1c:8c:73:22:22:32:ed:58:83:9d:a9:28:f9Signer

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

ole32

Sections

.text Size: 226KB - Virtual size: 225KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 15KB - Virtual size: 15KB

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 1024B - Virtual size: 1000B

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 2KB - Virtual size: 1KB

3d:4a:98:4c:4c:26:42:42:bf:7c:4e:8d:c9:be:92:cf
Certificate

c6:b9:03:ce:ba:d6:20:1c:8c:73:22:22:32:ed:58:83:9d:a9:28:f9
Signer

.text
Size: 226KB - Virtual size: 225KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 15KB - Virtual size: 15KB

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 2KB - Virtual size: 1KB