22b7b49e1871bfa007421c46a18a119f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

22b7b49e1871bfa007421c46a18a119f_JaffaCakes118
Size

112KB
MD5

22b7b49e1871bfa007421c46a18a119f
SHA1

01489bd22c191b89fcd7265263f5d3fcc2d14b3c
SHA256

7c96c4426648c692f8b46f083a575e2b6461aaa0598e36408bca25ce4d7b8b24
SHA512

f82c5ff2eabf6759b3b12236ce38c2c7d674cb11b0a6b30c50927bc18e28a42bbc816e669128cc72f255a87b0238f1ff8256aab2f04722167188606dabcdce0a
SSDEEP

1536:WIMj85horTLfkKeRDS3YJBS5bHTgKVdB0toP2ylOiufw4ANFFkoIsEToABxuZT4k:9Mo5hELIRW3zx4tA7koI3ToABqMk

Score

1^/10

Malware Config

Signatures

Files

22b7b49e1871bfa007421c46a18a119f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

cdd839c01fdab174d8a9d7cc41b7a2ef

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

53:f0:7c:ba:47:55:8d:64:93:39:d9:f4
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

27/01/2017, 11:00

Not After

31/03/2020, 12:33

Subject

CN=Biz Secure Labs Pvt. Ltd.,O=Biz Secure Labs Pvt. Ltd.,L=Pune,ST=Maharashtra,C=IN,1.2.840.113549.1.9.1=#0c1a737570706f727440696e646961616e746976697275732e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

a3:ac:25:66:32:1b:ea:82:38:02:20:92:99:29:bf:67:c6:4e:eb:c2
Signer

Actual PE Digest

a3:ac:25:66:32:1b:ea:82:38:02:20:92:99:29:bf:67:c6:4e:eb:c2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
SetFilePointer
HeapAlloc
GetCPInfo
RtlUnwind
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
SetStdHandle
RaiseException
FlushFileBuffers
CloseHandle

Exports

Exports

Assemble
Disasm
Disassembleback
Disassembleforward
VB_SetOptions

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cdd839c01fdab174d8a9d7cc41b7a2ef

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cdCertificate

Extended Key Usages

Key Usages

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

53:f0:7c:ba:47:55:8d:64:93:39:d9:f4Certificate

Extended Key Usages

Key Usages

a3:ac:25:66:32:1b:ea:82:38:02:20:92:99:29:bf:67:c6:4e:eb:c2Signer

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 62KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 12KB - Virtual size: 17KB

.reloc Size: 12KB - Virtual size: 8KB

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

53:f0:7c:ba:47:55:8d:64:93:39:d9:f4
Certificate

a3:ac:25:66:32:1b:ea:82:38:02:20:92:99:29:bf:67:c6:4e:eb:c2
Signer

.text
Size: 64KB - Virtual size: 62KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 12KB - Virtual size: 17KB

.reloc
Size: 12KB - Virtual size: 8KB