355417e08d5187f3b64023da698c85f4_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

355417e08d5187f3b64023da698c85f4_JaffaCakes118
Size

621KB
MD5

355417e08d5187f3b64023da698c85f4
SHA1

af93056e95b7e1919d2a2c593c026e367de3f974
SHA256

152ee0c4edb7341086942e572ccd192bcb010ba4397486fd3a68cee9d8b0f9dc
SHA512

19ef50566836435e62b1c1849675771ccb76e71e56409bed113087df1b0c8f11f7bcbee15f4ccb197174657617cb8408beabb49b3b0cd9217762ae3888c9c842
SSDEEP

12288:rHOF9fZn38JZKY4qAAso5PVH+w29BMCvpI+jIaQcU:rep3W4Y4qAAso5RH8BxBlj83

Score

1^/10

Malware Config

Signatures

Files

355417e08d5187f3b64023da698c85f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

856811589b378eeb07156d5cf2a3a571

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30-05-2000 10:48

Not After

30-05-2020 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30-05-2000 10:48

Not After

30-05-2020 10:48

Subject

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

07:60:b6:ea:64:0e:70:aa:e0:49:d9:8a:3d:8d:27:8c
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

06-03-2015 00:00

Not After

05-03-2016 23:59

Subject

CN=100 PROGRAMM,O=100 PROGRAMM,POSTALCODE=398001,STREET=SOVETSKAYA\, 66,L=LIPECK,ST=LIPECK REGION,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

58:62:f3:34:43:fe:bc:0c:e3:fe:94:f4:36:e5:f8:7e:0c:d7:23:a5
Signer

Actual PE Digest

58:62:f3:34:43:fe:bc:0c:e3:fe:94:f4:36:e5:f8:7e:0c:d7:23:a5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleHandleA
GetLastError
ResumeThread
GetFileAttributesA
VirtualAlloc
HeapSize
GetLocaleInfoA
ReadFile
SetFilePointer
FlushFileBuffers
Sleep
OpenMutexW
FindClose
VirtualFree
LCMapStringW
LCMapStringA
RaiseException
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
GetProcAddress
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
HeapAlloc
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
MultiByteToWideChar
VirtualProtect
GetSystemInfo
GetStringTypeA
GetStringTypeW
SetStdHandle

user32

LoadIconA
GetWindowTextA
LoadImageA
LoadCursorA

gdi32

CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject

oleaut32

SysAllocString

winmm

auxSetVolume

ws2_32

send
WSAGetLastError
setsockopt

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 528KB - Virtual size: 526KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

856811589b378eeb07156d5cf2a3a571

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

01Certificate

Key Usages

07:60:b6:ea:64:0e:70:aa:e0:49:d9:8a:3d:8d:27:8cCertificate

Extended Key Usages

Key Usages

58:62:f3:34:43:fe:bc:0c:e3:fe:94:f4:36:e5:f8:7e:0c:d7:23:a5Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

oleaut32

winmm

ws2_32

Sections

.text Size: 44KB - Virtual size: 41KB

.data Size: 528KB - Virtual size: 526KB

.tls Size: 8KB - Virtual size: 7KB

.rsrc Size: 32KB - Virtual size: 31KB

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

01
Certificate

07:60:b6:ea:64:0e:70:aa:e0:49:d9:8a:3d:8d:27:8c
Certificate

58:62:f3:34:43:fe:bc:0c:e3:fe:94:f4:36:e5:f8:7e:0c:d7:23:a5
Signer

.text
Size: 44KB - Virtual size: 41KB

.data
Size: 528KB - Virtual size: 526KB

.tls
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 32KB - Virtual size: 31KB