25f38f2bb447a9616b0778ce8336ff4d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

25f38f2bb447a9616b0778ce8336ff4d_JaffaCakes118
Size

6.5MB
MD5

25f38f2bb447a9616b0778ce8336ff4d
SHA1

bfbfe9fa2e7fb59a1c8168bb5afa0d2ecac32ead
SHA256

54c8060ed6c6cb416db4b2d3a415166f7749b764bb6d297c32d4e79a0fdb4329
SHA512

87b9cf9295b146871dd10a860ef6d0d5536ebdca2be0b0a1e866e5ec5ff6b7c0c7da3e99aa9a4b584aabb051b3955d94c58496d99f33830d571049cb2098588c
SSDEEP

98304:c7B+xR7NLDk1qeawG7jVjojRfMlWFJCOXdYVT/+VcV3+6BirEjv9X6e9TQFBjqdn:8AghGVkNjuTWVc1NBiA9TW0JJl

Score

1^/10

Malware Config

Signatures

Files

25f38f2bb447a9616b0778ce8336ff4d_JaffaCakes118
.exe windows:6 windows x86 arch:x86

40900a8a0f759d31ed800447781df86a

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

9d:64:ce:50:0c:99:d1:64:08:47:1c:91:c2:82:b4:53:83:f2:8f:f6
Certificate

Issuer

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Not Before

01/05/2019, 09:40

Not After

01/06/2019, 09:40

Subject

CN=toster,OU=toster,O=toster,C=UK,1.2.840.113549.1.9.1=#0c0e696e666f40746f737465722e7077

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e6
Certificate

Issuer

CN=Ascertia Root CA 2,O=Ascertia,C=GB

Not Before

21/04/2009, 12:15

Not After

14/04/2028, 23:59

Subject

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9d:64:ce:50:0c:99:d1:64:08:47:1c:91:c2:82:b4:53:83:f2:8f:f6
Certificate

Issuer

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Not Before

01/05/2019, 09:40

Not After

01/06/2019, 09:40

Subject

CN=toster,OU=toster,O=toster,C=UK,1.2.840.113549.1.9.1=#0c0e696e666f40746f737465722e7077

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e6
Certificate

Issuer

CN=Ascertia Root CA 2,O=Ascertia,C=GB

Not Before

21/04/2009, 12:15

Not After

14/04/2028, 23:59

Subject

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d4:31:a7:b8:6a:df:93:1b:6c:87:35:e4:6e:a8:b5:93:74:d8:f3:fc:40:c7:de:36:6e:e6:83:a5:95:b9:29:4b
Signer

Actual PE Digest

d4:31:a7:b8:6a:df:93:1b:6c:87:35:e4:6e:a8:b5:93:74:d8:f3:fc:40:c7:de:36:6e:e6:83:a5:95:b9:29:4b

Digest Algorithm

sha256

PE Digest Matches

true

93:85:1a:a3:9c:0c:6b:0b:ae:48:b5:77:e9:aa:34:39:b3:ee:5e:2e
Signer

Actual PE Digest

93:85:1a:a3:9c:0c:6b:0b:ae:48:b5:77:e9:aa:34:39:b3:ee:5e:2e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetClipboardData
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW

shell32

ShellExecuteA

wtsapi32

WTSSendMessageW

Sections

g7&akik`
Size: - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

:8iJgyN-
Size: - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

@m%\]v$w
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

I>`tY\fT
Size: - Virtual size: 548KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

+wPGZN<d
Size: - Virtual size: 546KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BYzH'qnI
Size: - Virtual size: 539KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

940G;Cn<
Size: - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

WVpkDKLV
Size: 6.4MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

^0mH%!P#
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

60(BQ27"
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40900a8a0f759d31ed800447781df86a

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

9d:64:ce:50:0c:99:d1:64:08:47:1c:91:c2:82:b4:53:83:f2:8f:f6Certificate

Extended Key Usages

Key Usages

e6Certificate

Key Usages

9d:64:ce:50:0c:99:d1:64:08:47:1c:91:c2:82:b4:53:83:f2:8f:f6Certificate

Extended Key Usages

Key Usages

e6Certificate

Key Usages

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

d4:31:a7:b8:6a:df:93:1b:6c:87:35:e4:6e:a8:b5:93:74:d8:f3:fc:40:c7:de:36:6e:e6:83:a5:95:b9:29:4bSigner

93:85:1a:a3:9c:0c:6b:0b:ae:48:b5:77:e9:aa:34:39:b3:ee:5e:2eSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

wtsapi32

Sections

g7&akik` Size: - Virtual size: 127KB

:8iJgyN- Size: - Virtual size: 54KB

@m%\]v$w Size: - Virtual size: 7KB

I>`tY\fT Size: - Virtual size: 548KB

+wPGZN<d Size: - Virtual size: 546KB

BYzH'qnI Size: - Virtual size: 539KB

940G;Cn< Size: - Virtual size: 3.1MB

WVpkDKLV Size: 6.4MB - Virtual size: 6.4MB

^0mH%!P# Size: 2KB - Virtual size: 1KB

60(BQ27" Size: 83KB - Virtual size: 83KB

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

9d:64:ce:50:0c:99:d1:64:08:47:1c:91:c2:82:b4:53:83:f2:8f:f6
Certificate

e6
Certificate

9d:64:ce:50:0c:99:d1:64:08:47:1c:91:c2:82:b4:53:83:f2:8f:f6
Certificate

e6
Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

d4:31:a7:b8:6a:df:93:1b:6c:87:35:e4:6e:a8:b5:93:74:d8:f3:fc:40:c7:de:36:6e:e6:83:a5:95:b9:29:4b
Signer

93:85:1a:a3:9c:0c:6b:0b:ae:48:b5:77:e9:aa:34:39:b3:ee:5e:2e
Signer

g7&akik`
Size: - Virtual size: 127KB

:8iJgyN-
Size: - Virtual size: 54KB

@m%\]v$w
Size: - Virtual size: 7KB

I>`tY\fT
Size: - Virtual size: 548KB

+wPGZN<d
Size: - Virtual size: 546KB

BYzH'qnI
Size: - Virtual size: 539KB

940G;Cn<
Size: - Virtual size: 3.1MB

WVpkDKLV
Size: 6.4MB - Virtual size: 6.4MB

^0mH%!P#
Size: 2KB - Virtual size: 1KB

60(BQ27"
Size: 83KB - Virtual size: 83KB