362b764c98363a595b43dbda8aa4ef6c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

362b764c98363a595b43dbda8aa4ef6c_JaffaCakes118
Size

1.3MB
MD5

362b764c98363a595b43dbda8aa4ef6c
SHA1

374b42d41276d816728108bd3b1356449a676c20
SHA256

49c32009fa305a3896dac5ddba4846be03f5c5261ecb9906917c133c243c9ffb
SHA512

71bc0907f1fdfe84536cd3b65acca92548b37dfdc8ec7c7c9f7676d6c3265f515982b87954d93915887e43ba228a1ee4458db0599ce7b8c412ec45cb7746c729
SSDEEP

24576:717TcYHoBQxMoBgT7u6wqzekG4Bd3kU3YGgOZj6IPrY5XcM55MhJgcP65E0q+CXR:7dTtHoBOMJSkzumkUngKjTPCBkhqcSjI

Score

1^/10

Malware Config

Signatures

Files

362b764c98363a595b43dbda8aa4ef6c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

72c26e329c88e464194b0496976d0de2

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

09:e0:15:e9:8e:4f:ab:cc:9a:c4:3e:04:2c:96:09:0d
Certificate

Issuer

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

30/07/2018, 00:00

Not After

16/10/2021, 12:00

Subject

CN=Jetico Inc. Oy,O=Jetico Inc. Oy,L=Espoo,C=FI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 High Assurance Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:1a:60:82:ed:f8:a9:8a:62:b6:12:b6:9a:f1:79:2e:d8:41:1f:b1
Signer

Actual PE Digest

0e:1a:60:82:ed:f8:a9:8a:62:b6:12:b6:9a:f1:79:2e:d8:41:1f:b1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

kernel32

WriteConsoleW
GetConsoleOutputCP
CreateThread
ReadFile
SetFilePointer
WriteFile
FindClose
FindFirstFileA
CloseHandle
SetFileTime
CreateFileA
GetLastError
CreateDirectoryA
GetModuleFileNameA
FindNextFileA
WaitForSingleObject
FreeLibrary
GetProcAddress
LoadLibraryA
GetDiskFreeSpaceA
SetFileAttributesA
CopyFileA
RemoveDirectoryA
DeleteFileA
GetFileSize
GetWindowsDirectoryA
GetTempPathA
GetExitCodeThread
ResumeThread
GetExitCodeProcess
CreateProcessA
GetVersion
WideCharToMultiByte
WriteConsoleA
FlushFileBuffers
GetProcessHeap
SetEndOfFile
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
MultiByteToWideChar
SetHandleCount
GetModuleHandleW
Sleep
ExitProcess
GetFileAttributesA
RtlUnwind
MoveFileA
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
RaiseException
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
GetFileType

user32

CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
CreateDialogParamA
SetWindowTextA
GetDlgItemTextA
SetDlgItemTextA
DestroyWindow
LoadStringA
RegisterClassA
DefWindowProcA
SetWindowPos
PostQuitMessage
SetTimer
LoadImageA
GetDC
DrawIcon
EndDialog
GetDlgItem
MessageBoxA
ShowWindow
PostMessageA
SendMessageA
LoadIconA

shell32

ShellExecuteExA

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

72c26e329c88e464194b0496976d0de2

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

09:e0:15:e9:8e:4f:ab:cc:9a:c4:3e:04:2c:96:09:0dCertificate

Extended Key Usages

Key Usages

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9Certificate

Extended Key Usages

Key Usages

0e:1a:60:82:ed:f8:a9:8a:62:b6:12:b6:9a:f1:79:2e:d8:41:1f:b1Signer

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

version

kernel32

user32

shell32

Sections

.text Size: 77KB - Virtual size: 76KB

.rdata Size: 28KB - Virtual size: 28KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 28KB - Virtual size: 28KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

09:e0:15:e9:8e:4f:ab:cc:9a:c4:3e:04:2c:96:09:0d
Certificate

0b:7e:10:90:3c:38:49:0f:fa:2f:67:9a:87:a1:a7:b9
Certificate

0e:1a:60:82:ed:f8:a9:8a:62:b6:12:b6:9a:f1:79:2e:d8:41:1f:b1
Signer

.text
Size: 77KB - Virtual size: 76KB

.rdata
Size: 28KB - Virtual size: 28KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 28KB - Virtual size: 28KB