General

Malware Config

Signatures

Files

• 042f5809f529b9d06119953c1d3a2bbd_JaffaCakes118

  .exe windows:5 windows x86 arch:x86

  3761264be1c53c591ab8b2afd8b13867

  
  

  Code Sign

  1b:e7:15

  Certificate

  Issuer

  OU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\, Inc.,C=US

  Not Before

  01-01-2014 07:00

  Not After

  30-05-2031 07:00

  Subject

  CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  07

  Certificate

  Issuer

  CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

  Not Before

  03-05-2011 07:00

  Not After

  03-05-2031 07:00

  Subject

  CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  62:a6:9e:72:e3:8a:fe:48

  Certificate

  Issuer

  CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

  Not Before

  08-12-2015 18:56

  Not After

  08-12-2016 18:56

  Subject

  CN=Super Click Interactive,O=Super Click Interactive,L=San Francisco,ST=California,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  aa:09:f5:9c:24:66:3a:bc:cd:2b:8c:74:06:e2:eb:a7:7b:7e:82:05

  Signer

  Actual PE Digest

  aa:09:f5:9c:24:66:3a:bc:cd:2b:8c:74:06:e2:eb:a7:7b:7e:82:05

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  comdlg32

  GetOpenFileNameA

  GetSaveFileNameA

  CommDlgExtendedError

  gdi32

  CreateBitmap

  AbortPath

  PolyPolygon

  FlattenPath

  DeleteObject

  EnumObjects

  SelectObject

  CreateFontIndirectA

  CreateFontA

  SelectClipPath

  user32

  DispatchMessageA

  TranslateMessage

  PostMessageA

  RegisterClassA

  GetWindowLongA

  DrawTextW

  EndPaint

  ShowWindow

  DrawTextA

  GetDC

  SendMessageA

  SendMessageW

  GetMessageA

  CreateWindowExA

  GetGuiResources

  InvertRect

  BeginPaint

  kernel32

  RtlUnwind

  GetSystemTimeAsFileTime

  InterlockedExchange

  Sleep

  InterlockedCompareExchange

  GetStartupInfoA

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  QueryPerformanceCounter

  GetTickCount

  GetCurrentThreadId

  FormatMessageA

  LocalFree

  TerminateThread

  GetLogicalProcessorInformation

  RegisterWaitForSingleObject

  CreateTimerQueue

  GetMailslotInfo

  SuspendThread

  DeleteTimerQueue

  GetLastError

  MultiByteToWideChar

  lstrcmpiA

  GetFileAttributesA

  GetProcAddress

  WaitForSingleObject

  ReleaseMutex

  CloseHandle

  GetFileSize

  MapViewOfFile

  CreateFileMappingA

  CreateFileA

  CreateMutexA

  GetVersionExA

  GetCurrentProcess

  GetVersion

  lstrcpynA

  ExitProcess

  GetModuleFileNameA

  FreeLibrary

  DeleteFileA

  SetEnvironmentVariableA

  DuplicateHandle

  GetCurrentProcessId

  GetEnvironmentVariableA

  GetExitCodeProcess

  TerminateProcess

  ResumeThread

  CreateProcessA

  GetCommandLineA

  LoadLibraryA

  FlushFileBuffers

  WriteFile

  SetCurrentDirectoryA

  CreateDirectoryA

  GetTempPathA

  GetModuleHandleA

  ReadConsoleA

  WriteConsoleA

  GetStdHandle

  GetCurrentDirectoryA

  GetFullPathNameA

  SetErrorMode

  QueueUserWorkItem

  HeapSize

  msvcrt

  realloc

  rand

  _pgmptr

  srand

  __argc

  __argv

  memmove

  ??0exception@@QAE@XZ

  ?what@exception@@UBEPBDXZ

  ??1exception@@UAE@XZ

  ??0exception@@QAE@ABV0@@Z

  _CxxThrowException

  _callnewh

  _ismbblead

  __getmainargs

  _cexit

  _exit

  _XcptFilter

  exit

  _acmdln

  _initterm

  _amsg_exit

  __setusermatherr

  __p__commode

  __p__fmode

  __set_app_type

  ??1type_info@@UAE@XZ

  _unlock

  __dllonexit

  _lock

  _onexit

  ?terminate@@YAXXZ

  _controlfp

  memset

  __CxxFrameHandler

  atoi

  _snprintf

  _time64

  memcpy

  free

  malloc

  ole32

  CoInitializeEx

  OleInitialize

  CoCreateInstance

  CoTaskMemFree

  CLSIDFromProgID

  shell32

  SHGetPathFromIDListA

  SHGetDiskFreeSpaceExA

  ShellExecuteExA

  SHFileOperationA

  SHBrowseForFolderA

  SHGetInstanceExplorer

  Sections

  .text

  Size: 57KB - Virtual size: 56KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 145KB - Virtual size: 145KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 178KB - Virtual size: 181KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ