1244bc10201ef3d53ff0636a8ea37b4d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1244bc10201ef3d53ff0636a8ea37b4d_JaffaCakes118
Size

1.3MB
MD5

1244bc10201ef3d53ff0636a8ea37b4d
SHA1

cabd3598626b99a16c6548722145aad622b6ecf2
SHA256

13fd93508aed361e5bce0c44c894d7918923bcf1a3d0965cda4465ed948052d8
SHA512

7a80064775abb5383f1c4a1eb8062ffd297796316f0fbd39801f81fe567a52977bbef646d4e7446fb38b5bc248cad930a216593ac41b4d3ac7879f6803992126
SSDEEP

24576:3pxExrAZgytP/tqLSuPDVGOohaEklrE4oSG2coNqu8tj1qsX:5xE2ZT3orPDgOohuPGuNzi1qm

Score

1^/10

Malware Config

Signatures

Files

1244bc10201ef3d53ff0636a8ea37b4d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4f30b3b7c23a96c6bef155f011bef89d

Code Sign

6f:89:67:85:16:e5:1f:98:43:8c:11:3d:e1:fb:fe:e8
Certificate

Issuer

CN=NBLHXEFU

Not Before

15/02/2019, 14:13

Not After

31/12/2039, 23:59

Subject

CN=NBLHXEFU

Extended Key Usages

ExtKeyUsageCodeSigning

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d0:95:a6:24:0c:90:c2:df:3d:da:c3:b0:be:49:e7:17:46:df:17:09
Signer

Actual PE Digest

d0:95:a6:24:0c:90:c2:df:3d:da:c3:b0:be:49:e7:17:46:df:17:09

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAllocEx
GetModuleHandleA

user32

DestroyMenu
ShowWindow
SetWindowTextW
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMessageW
TranslateMessage
GetActiveWindow
ValidateRect
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
SetWindowsHookExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
IsWindow
GetForegroundWindow
DispatchMessageW
GetSubMenu
GetMenuItemCount
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
CopyRect
PtInRect
GetMenu
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
CallNextHookEx
GetMenuItemID
GetMenuState
PostQuitMessage
PostMessageW
MessageBoxW
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongW
GetParent
SendMessageW
GetWindowThreadProcessId
UnhookWindowsHookEx
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
GetWindowPlacement
GetWindowRect
GetWindow
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowTextW
LoadCursorW
GetCursorPos
AppendMenuW
BeginDeferWindowPos
BeginPaint
BringWindowToTop
ChangeDisplaySettingsW
CheckMenuRadioItem
ChildWindowFromPoint
CloseClipboard
CreateAcceleratorTableW
CreateDialogIndirectParamW
CreateDialogParamW
CreateIconIndirect
CreateMenu
CreatePopupMenu
DdeClientTransaction
DdeConnect
DdeCreateDataHandle
DdeCreateStringHandleW
DdeDisconnect
DdeFreeDataHandle
DdeFreeStringHandle
DdeGetData
DdeGetLastError
DdeInitializeW
DdeNameService
DdePostAdvise
DdeQueryStringW
DdeUninitialize
DefFrameProcW
DefMDIChildProcW
DeferWindowPos
DestroyAcceleratorTable
DestroyCursor
DestroyIcon
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIconEx
DrawMenuBar
DrawStateW
EmptyClipboard
EnableScrollBar
EndDeferWindowPos
EndPaint
EnumClipboardFormats
EnumDisplaySettingsW
EnumWindows
ExitWindowsEx
FillRect
FindWindowExW
FlashWindow
GetAsyncKeyState
GetClipboardData
GetClipboardFormatNameW
GetDesktopWindow
GetDialogBaseUnits
GetDoubleClickTime
GetIconInfo
GetMenuItemInfoW
GetMenuStringW
GetScrollInfo
GetSystemMenu
GetUpdateRgn
GetWindowDC
GetWindowTextLengthW
HideCaret
InflateRect
InsertMenuItemW
InsertMenuW
InvalidateRect
IsClipboardFormatAvailable
IsDialogMessageW
IsZoomed
KillTimer
LoadAcceleratorsW
LoadCursorFromFileW
LoadImageW
MapVirtualKeyW
MessageBeep
MessageBoxA
MoveWindow
MsgWaitForMultipleObjects
OffsetRect
OpenClipboard
PostThreadMessageW
RedrawWindow
RegisterClipboardFormatW
ReleaseCapture
RemoveMenu
ScreenToClient
ScrollWindow
SetCapture
SetClipboardData
SetCursorPos
SetFocus
SetMenuItemInfoW
SetParent
SetRect
SetScrollInfo
SetTimer
SetWindowRgn
ShowCaret
ShowCursor
SystemParametersInfoW
TrackPopupMenu
TranslateAcceleratorW
TranslateMDISysAccel
UnionRect
UnregisterClassW
UpdateWindow
ValidateRgn
VkKeyScanW
WaitForInputIdle
WindowFromPoint
keybd_event

gdi32

TextOutW
GetStockObject
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
RectVisible
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetTextColor
GetDeviceCaps
SaveDC
RestoreDC
SetBkColor
ExtTextOutW

advapi32

RegQueryValueExW

shlwapi

PathFindFileNameW
PathFindExtensionW

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 796KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4f30b3b7c23a96c6bef155f011bef89d

Code Sign

6f:89:67:85:16:e5:1f:98:43:8c:11:3d:e1:fb:fe:e8Certificate

Extended Key Usages

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

d0:95:a6:24:0c:90:c2:df:3d:da:c3:b0:be:49:e7:17:46:df:17:09Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.data Size: 20KB - Virtual size: 796KB

6f:89:67:85:16:e5:1f:98:43:8c:11:3d:e1:fb:fe:e8
Certificate

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

d0:95:a6:24:0c:90:c2:df:3d:da:c3:b0:be:49:e7:17:46:df:17:09
Signer

.text
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 20KB - Virtual size: 796KB