2a55dc9c8709b9c3e08d7fa63c5e5d6f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2a55dc9c8709b9c3e08d7fa63c5e5d6f_JaffaCakes118
Size

322KB
MD5

2a55dc9c8709b9c3e08d7fa63c5e5d6f
SHA1

505889de93cfa6cc5f17987913f20899b809b1f8
SHA256

101e592e116706887f6b73cd90f40823183e32b586aa0584cf2cccb132f6bcf0
SHA512

d618ef2700afd7fec8db1beb14b83dd73ce9fa3b75e7b0e9b66fa5b12189a56427f19310558d6f63563b1a216d00e4efd860f430e054dd585c791a2bc9690152
SSDEEP

6144:ipyCFzsZnBAifWfqdURRyYngd8dd3Jto/yaagDAonTuJbIE:iXsXAiOfXRyw+gQSJbh

Score

1^/10

Malware Config

Signatures

Files

2a55dc9c8709b9c3e08d7fa63c5e5d6f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fcbab61987596a204203b83b29e80846

Code Sign

1f:f6:d9:ed:57:4e:c2:a0:99:38:9b:4b:de:6c:6d:c4
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/02/2015, 00:00

Not After

25/02/2016, 23:59

Subject

CN=Consortium Group ltd,O=Consortium Group ltd,POSTALCODE=00152,STREET=CORNER OF GR.MARLBOROUGH UN GR.GEORGE STR.+STREET=3RD FLOOR\, C&h TOWERS\,,L=ROSEAU,ST=ROSEAU,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

b2:cd:9f:6f:95:34:dc:ee:d9:1f:1d:bb:bd:c4:f5:00:c7:c9:72:11
Signer

Actual PE Digest

b2:cd:9f:6f:95:34:dc:ee:d9:1f:1d:bb:bd:c4:f5:00:c7:c9:72:11

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

version

VerQueryValueW

kernel32

TlsSetValue
GetLastError
CreateFileMappingA
FreeLibrary
FindResourceA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
CloseHandle
QueryPerformanceCounter
DeleteFileW
CreateThread
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
ReadFile
SetStdHandle
SetFilePointer
HeapReAlloc
HeapAlloc
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapFree
LockResource
lstrcmpiA
CreateFileA
VirtualAlloc
WriteFile
GetCommandLineW
GetTickCount
GetStringTypeW
GetModuleHandleW
GetVersionExA
GetVersion
ExitProcess
TlsGetValue
GetStartupInfoA
GetModuleHandleA
GetProcAddress
GetCommandLineA
LCMapStringW
GetStringTypeA
FlushFileBuffers

user32

CreateWindowExA
GetSystemMenu
GetClassNameA
InvalidateRect
IsDialogMessageA
GetWindowLongA
GetSystemMetrics
GetClassInfoA
MessageBoxA
ShowWindow
RegisterClipboardFormatA
IsChild
IsIconic
IsRectEmpty
IsWindow
RemovePropA
SetMenu
SetMenuItemInfoA
SetPropA
SetRect
SetScrollInfo
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
IntersectRect
IsWindowEnabled
IsWindowVisible
IsZoomed
RemoveMenu
GetClientRect
RegisterClassExA
EndDialog
GetCapture

gdi32

SetAbortProc
GetLogColorSpaceW
SetBkMode
DeleteObject
CreatePen
CreatePenIndirect
GetClipBox
SetBkColor
DeleteEnhMetaFile
CreateFontIndirectA
OffsetWindowOrgEx
ExcludeClipRect
DeleteMetaFile

comdlg32

ReplaceTextW

advapi32

AllocateAndInitializeSid
RegCloseKey
RegSetValueExW

shell32

ShellExecuteA

ole32

CoInitialize
CoUninitialize

oleaut32

SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayPutElement
VariantInit
SafeArrayRedim

Sections

.text
Size: 268KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcbab61987596a204203b83b29e80846

Code Sign

1f:f6:d9:ed:57:4e:c2:a0:99:38:9b:4b:de:6c:6d:c4Certificate

Extended Key Usages

Key Usages

b2:cd:9f:6f:95:34:dc:ee:d9:1f:1d:bb:bd:c4:f5:00:c7:c9:72:11Signer

Headers

File Characteristics

Imports

comctl32

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 268KB - Virtual size: 264KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 28KB - Virtual size: 26KB

1f:f6:d9:ed:57:4e:c2:a0:99:38:9b:4b:de:6c:6d:c4
Certificate

b2:cd:9f:6f:95:34:dc:ee:d9:1f:1d:bb:bd:c4:f5:00:c7:c9:72:11
Signer

.text
Size: 268KB - Virtual size: 264KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 28KB - Virtual size: 26KB