e99b695dcaac310fec9fd46788b65609_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
e99b695dcaac310fec9fd46788b65609_JaffaCakes118
Size 609KB
Sample240409-kqfgcaec7z
SHA256 dd2a21f66f26d7018ac60363450e65246ad273705d686e455863752b61e9a329
MD5 e99b695dcaac310fec9fd46788b65609
SHA1 29ffc824fe0de2839a3c81fda5fa2c738b57dfa8
SHA512 56ba1cd5e2f335853a9ea07323ce0c574b4a85ef6b75399bf13f59d8e2ced835410c0b32ace7bba8b8cabf941bdbcae3534476596364b1aa74c621b35a4db29f
SSDEEP 12288:FkZAy8QvrYerl57pDH27cDLigNOq1JIOrheELbt/bhWhwnt06RTX+KY:W8wrYeIcDLRgSHrEELhhww5Y
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

e99b695dcaac310fec9fd46788b65609_JaffaCakes118

.exe 609KB

e99b695dcaac310fec9fd46788b65609_JaffaCakes118

IMPHASH a57ccc46bac3b44b4e1ba84309de8511
SHA256 dd2a21f66f26d7018ac60363450e65246ad273705d686e455863752b61e9a329
MD5 e99b695dcaac310fec9fd46788b65609
SHA1 29ffc824fe0de2839a3c81fda5fa2c738b57dfa8
SHA512 56ba1cd5e2f335853a9ea07323ce0c574b4a85ef6b75399bf13f59d8e2ced835410c0b32ace7bba8b8cabf941bdbcae3534476596364b1aa74c621b35a4db29f
SSDEEP 12288:FkZAy8QvrYerl57pDH27cDLigNOq1JIOrheELbt/bhWhwnt06RTX+KY:W8wrYeIcDLRgSHrEELhhww5Y
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

3e:fc:fb:f4:99:73:46:74:31:e2:ae:fb:f3:c3:74:a8:bc:0f:c0:be:de:71:7a:2e:39:45:a9:4c:93:da:9d:75

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Google LLC,O=Google LLC,L=Mountain View,ST=ca,C=US

Chains

Apr 13, 2021

CN=Google LLC,O=Google LLC,L=Mountain View,ST=ca,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

9f:5a:75:15:91:73:a8:8d:e4:4e:f6:76:aa:7e:bd:b2:4a:f2:4a:19

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Chains

Apr 13, 2021

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Serial Number

06:ae:a7:6b:ac:46:a9:e8:cf:e6:d2:9e:45:aa:f0:33

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 8, 2019 - Nov 16, 2022

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Dummy certificate

Serial Number

Issuer

CN=Unknown issuer

Key Usages

KeyUsageCertSign

Ext Key Usages

Timespan

Jan 1, 2013 - Apr 1, 2013

Subject

CN=Google LLC,O=Google LLC,L=Mountain View,ST=ca,C=US

Serial Number

0c:15:be:4a:15:bb:09:03:c9:01:b1:d6:c2:65:30:2f

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 7, 2018 - Nov 17, 2021

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

Major OS version

Entry point

9568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hevalidigar-rewapul\tejulapon\cibele jimusilezok-noh.pdb

kernel32

GetVolumeNameForVolumeMountPointA GetComputerNameA GetFileSize SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA CommConfigDialogA GetConsoleAliasExesLengthA FreeLibrary InterlockedIncrement InterlockedDecrement ZombifyActCtx GlobalLock GetProfileSectionA GetFileAttributesExA FreeEnvironmentStringsA GetTickCount GetCommConfig LocalFlags GetConsoleAliasesLengthA GetWindowsDirectoryA SetCommState SetProcessPriorityBoost TlsSetValue GetEnvironmentStrings FindResourceExA GlobalAlloc LoadLibraryW _hread GetCalendarInfoA GetSystemWow64DirectoryW SetSystemTimeAdjustment GetSystemWindowsDirectoryA InitAtomTable GetBinaryTypeA ReadFile GetBinaryTypeW SetConsoleTitleA VirtualUnlock SetCurrentDirectoryA GetStartupInfoA GetStdHandle GetCPInfoExW GetCurrentDirectoryW GetComputerNameExW VerLanguageNameA SetFirmwareEnvironmentVariableW CreateNamedPipeA WriteProfileSectionA FreeUserPhysicalPages SetComputerNameA GetLocalTime LoadLibraryA CreateSemaphoreW SetConsoleCtrlHandler Process32NextW CreateIoCompletionPort EnumResourceNamesA WriteProfileStringW BuildCommDCBA VirtualProtect CompareStringA _lopen FindAtomW GetVersion DeleteFileW UnregisterWaitEx ReadConsoleOutputCharacterW LCMapStringW CopyFileExA AreFileApisANSI GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage GetProcAddress TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetLastError LeaveCriticalSection EnterCriticalSection SetStdHandle GetFileType WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection SetHandleCount QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers GetModuleHandleA

user32

GetMessageTime GetMenuInfo

Sharing

General

Malware Config

Signatures

File Explorer

e99b695dcaac310fec9fd46788b65609_JaffaCakes118

PE Signature issue

PE Signature issue

kernel32

user32

generic