34dc33d51b581c076831a98459b01c05_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

34dc33d51b581c076831a98459b01c05_JaffaCakes118
Size

31KB
MD5

34dc33d51b581c076831a98459b01c05
SHA1

43c6e2f3baf0b7f8631a6445927170909d861676
SHA256

fcc0ad9448dba99fa29d724fc73bf0a85ad5fe12e653f27a9cafb70866c94dba
SHA512

9d2d0886ed6921c3319b06fcbb36945d8f5a83e40bf01ac892a5e6eeceff916e87c123d94025ec22628b2b4abe7c97bbf5621e94a831ca29ac269b347730d0d2
SSDEEP

768:eAHKmM0qauedFQFtxTXKXAx6ZQgZOgRTr7DUOwgi:elmMyTcTXfxhgZzToO

Score

1^/10

Malware Config

Signatures

Files

34dc33d51b581c076831a98459b01c05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

13/04/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:40:5c:1f:0e:d2:58:88:2b:e5:4d:86:86:ba:11:ea:45
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

23/08/2013, 00:00

Not After

23/09/2024, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G1,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

11:21:1c:90:d7:ac:b2:24:19:ad:4c:8a:85:7e:86:9a:0d:bb
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

16/03/2012, 19:38

Not After

17/03/2015, 19:38

Subject

CN=Wirepath Home Systems\, LLC,OU=Product Development,O=Wirepath Home Systems\, LLC,L=Charlotte,ST=NC,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:2e:13:f9:db:e0:94:f8:62:e0:83:db:7b:eb:0d:e0:28:34:51:d7
Signer

Actual PE Digest

30:2e:13:f9:db:e0:94:f8:62:e0:83:db:7b:eb:0d:e0:28:34:51:d7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 21KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

691f1193f16065947032ace3a2329e55

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7Certificate

Key Usages

04:00:00:00:00:01:2f:4e:e1:35:5cCertificate

Extended Key Usages

Key Usages

11:21:40:5c:1f:0e:d2:58:88:2b:e5:4d:86:86:ba:11:ea:45Certificate

Extended Key Usages

Key Usages

11:21:1c:90:d7:ac:b2:24:19:ad:4c:8a:85:7e:86:9a:0d:bbCertificate

Extended Key Usages

Key Usages

30:2e:13:f9:db:e0:94:f8:62:e0:83:db:7b:eb:0d:e0:28:34:51:d7Signer

Headers

File Characteristics

Imports

kernel32

msvcrt

comctl32

user32

gdi32

ole32

shell32

shlwapi

Sections

.MPRESS1 Size: 21KB - Virtual size: 52KB

.MPRESS2 Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 880B

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

11:21:40:5c:1f:0e:d2:58:88:2b:e5:4d:86:86:ba:11:ea:45
Certificate

11:21:1c:90:d7:ac:b2:24:19:ad:4c:8a:85:7e:86:9a:0d:bb
Certificate

30:2e:13:f9:db:e0:94:f8:62:e0:83:db:7b:eb:0d:e0:28:34:51:d7
Signer

.MPRESS1
Size: 21KB - Virtual size: 52KB

.MPRESS2
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 880B