5ee665b1b1de8e487d7df907dbcbc52a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5ee665b1b1de8e487d7df907dbcbc52a_JaffaCakes118
Size

7.2MB
MD5

5ee665b1b1de8e487d7df907dbcbc52a
SHA1

0f0450a84e901dc53c868b18145e647081ed3a8b
SHA256

50371a3f0b7467b3b29e376055087e1f69bca2e957c6ca24c8906710eb43b3af
SHA512

56bd9e3e69c99320b69067799ffb23b9a5042e4f1e1db0c64dad9677c76de35030ce9a9f3385656c18460edab97aa12ca385a8b068aa0c2e44baee88a513f9b8
SSDEEP

196608:IOkWYgipyOXtpR2PZlowBul8kF8P9ugn7h:59YjJR2PX/Bul8uw9Bn7h

Score

1^/10

Malware Config

Signatures

Files

5ee665b1b1de8e487d7df907dbcbc52a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f99aee9d8c624a97c5ec124acb5961ec

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:e6:0e:98
Certificate

Issuer

CN=CryptGuard Signing Root CA,OU=CPS Incorporated by Reference+OU=cryptguard.com,O=CryptGuard Certification Authority,L=Regina,ST=Saskatchewan,C=CA,1.2.840.113549.1.9.1=#0c197369676e726f6f74636140637279707467756172642e636f6d,2.5.4.46=#13203665653032393830336235653131646139653135303030326135643563353162

Not Before

18/08/2006, 19:01

Not After

17/08/2011, 19:01

Subject

CN=smorgasbordet.com,O=Pelle Orinius,L=Stockholm,C=SE,1.2.840.113549.1.9.1=#0c1770656c6c6540736d6f72676173626f726465742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageClientAuth

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment
KeyUsageDataEncipherment

02
Certificate

Issuer

CN=CryptGuard Authoritative Root CA,OU=CPS Incorporated by Reference+OU=cryptguard.com,O=CryptGuard Certification Authority,L=Regina,ST=Saskatchewan,C=CA,1.2.840.113549.1.9.1=#0c1961757468726f6f74636140637279707467756172642e636f6d,2.5.4.46=#13203665653032393830336235653131646139653135303030326135643563353162

Not Before

07/11/2005, 00:01

Not After

01/11/2030, 00:01

Subject

CN=CryptGuard Signing Root CA,OU=CPS Incorporated by Reference+OU=cryptguard.com,O=CryptGuard Certification Authority,L=Regina,ST=Saskatchewan,C=CA,1.2.840.113549.1.9.1=#0c197369676e726f6f74636140637279707467756172642e636f6d,2.5.4.46=#13203665653032393830336235653131646139653135303030326135643563353162

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
ExtKeyUsageEmailProtection

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageKeyEncipherment
KeyUsageDataEncipherment
KeyUsageKeyAgreement
KeyUsageCertSign
KeyUsageCRLSign

32:07:03:ff:a3:ae:f7:8a:e7:e6:64:f1:88:3d:f6:71:45:26:a9:72
Signer

Actual PE Digest

32:07:03:ff:a3:ae:f7:8a:e7:e6:64:f1:88:3d:f6:71:45:26:a9:72

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GlobalAlloc
GetProcessHeap
HeapAlloc
HeapFree
Sleep
lstrcpyA
lstrcatA
MoveFileA
SetFileAttributesA
lstrlenA
GetFileAttributesA
CreateFileA
GetFileTime
CompareFileTime
CloseHandle
SetFileTime
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
LoadLibraryA
GetModuleFileNameA
FreeLibrary
GetProcAddress
WritePrivateProfileStringA
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
GetPrivateProfileStringA
lstrcmpA
lstrcmpiA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
SetFilePointer
SetEndOfFile
GetCurrentProcess
ExitProcess
ReadFile
WriteFile
GetTickCount
GetModuleHandleA
GetCommandLineA
GetTempPathA
CopyFileA
MulDiv
lstrcpynA
GetDiskFreeSpaceA
CreateThread
GetShortPathNameA
GetWindowsDirectoryA
CreateDirectoryA
RemoveDirectoryA
GetSystemDirectoryA
GetVersionExA
MultiByteToWideChar

user32

LoadIconA
LoadCursorA
RegisterClassA
SystemParametersInfoA
GetDesktopWindow
CreateWindowExA
BeginPaint
GetClientRect
SetRect
FillRect
GetWindowTextA
DrawTextA
EndPaint
DefWindowProcA
SendMessageA
ShowWindow
SetForegroundWindow
MessageBoxA
wsprintfA
DispatchMessageA
PeekMessageA
FindWindowA
ExitWindowsEx
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
SetDlgItemTextA
GetClassInfoA
DialogBoxParamA
GetDC
GetDlgItem
ReleaseDC
SetClassLongA
LoadImageA
EndDialog
GetWindowRect
ScreenToClient
SetWindowPos
SetFocus
GetDlgCtrlID
EnableWindow
IsWindowEnabled
GetParent
SendDlgItemMessageA
GetDlgItemTextA
IsDlgButtonChecked
SetCursor
GetSysColor
GetSysColorBrush
SetWindowLongA
IsWindowVisible

gdi32

CreateSolidBrush
DeleteObject
CreateFontA
SelectObject
SetBkMode
SetTextColor
GetDeviceCaps
SetBkColor
GetStockObject
GetTextMetricsA
TextOutA
CreateCompatibleDC
BitBlt
CreatePen
MoveToEx
LineTo
CreateBrushIndirect
GetNearestColor

advapi32

RegOpenKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegDeleteKeyA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

shell32

ShellExecuteA
SHFileOperationA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc

ole32

OleInitialize
OleUninitialize
CoCreateInstance

comctl32

ord17

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f99aee9d8c624a97c5ec124acb5961ec

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

44:e6:0e:98Certificate

Extended Key Usages

Key Usages

02Certificate

Extended Key Usages

Key Usages

32:07:03:ff:a3:ae:f7:8a:e7:e6:64:f1:88:3d:f6:71:45:26:a9:72Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

version

shell32

ole32

comctl32

Sections

.text Size: 34KB - Virtual size: 34KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 5KB - Virtual size: 19KB

.rsrc Size: 8KB - Virtual size: 7KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

44:e6:0e:98
Certificate

02
Certificate

32:07:03:ff:a3:ae:f7:8a:e7:e6:64:f1:88:3d:f6:71:45:26:a9:72
Signer

.text
Size: 34KB - Virtual size: 34KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 5KB - Virtual size: 19KB

.rsrc
Size: 8KB - Virtual size: 7KB