6049ed6e9745b1913c2d52f648976199_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6049ed6e9745b1913c2d52f648976199_JaffaCakes118
Size

537KB
MD5

6049ed6e9745b1913c2d52f648976199
SHA1

be8396ef464ee7a8e0a780e83e0264721e688717
SHA256

97c2b64b4b3ab2b4478e5b6f7fea3c597fd0cce941b38dfbbd031e15a097bb95
SHA512

b491a789f7a02e741410c41d4b17bff224b24a334a2fc33f77b3da7c6c0ea62520314b28422d21688765d56e3bd831b8ec13ecdd61db3eccc5d1e329582ae52f
SSDEEP

6144:b/L2FapyvljxykBunWM7QeQVTw+RlTFsO2i2299OJaVhyKQt9MnjzQxeTYu+xSl1:3fSlytW1eQVT3sO2iD6a+KQ01E+l1

Score

1^/10

Malware Config

Signatures

Files

6049ed6e9745b1913c2d52f648976199_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ae59200ad3f70d2504a2340db7a5097a

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d0:e5:92:2e:2b:69:fd:4d:0e:3f:fa:18:81:ab:b3:a6
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2016, 00:00

Not After

25/05/2017, 23:59

Subject

CN=Smart Union,O=Smart Union,POSTALCODE=127474,STREET=Beskudnikovsky boulevard 2,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4c:b7:52:8f:b6:af:6a:84:17:f9:5a:4f:9d:04:8b:02:c4:d0:d2:58:52:d6:94:82:b2:66:a4:4a:3b:e3:c1:f4
Signer

Actual PE Digest

4c:b7:52:8f:b6:af:6a:84:17:f9:5a:4f:9d:04:8b:02:c4:d0:d2:58:52:d6:94:82:b2:66:a4:4a:3b:e3:c1:f4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
LoadLibraryA
VirtualAlloc

user32

GetScrollRange
IsWindowVisible
LoadCursorW
LoadBitmapA
RealGetWindowClassW
ShowWindow
GetUserObjectInformationA

advapi32

RegOpenKeyA
RegQueryValueExW

shell32

SHChangeNotify
SHFileOperation
SHFreeNameMappings
SHGetFolderPathW
DragQueryPoint
ExtractIconEx
ExtractAssociatedIconExW
Shell_NotifyIconW
ShellExecuteEx
SHQueryRecycleBinW

shlwapi

StrRChrA
StrStrIW

msvcrt

_XcptFilter
__getmainargs
__initenv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_wcsicmp
exit

Sections

.text
Size: 516KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae59200ad3f70d2504a2340db7a5097a

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

d0:e5:92:2e:2b:69:fd:4d:0e:3f:fa:18:81:ab:b3:a6Certificate

Extended Key Usages

Key Usages

4c:b7:52:8f:b6:af:6a:84:17:f9:5a:4f:9d:04:8b:02:c4:d0:d2:58:52:d6:94:82:b2:66:a4:4a:3b:e3:c1:f4Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

shlwapi

msvcrt

Sections

.text Size: 516KB - Virtual size: 516KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 11KB - Virtual size: 10KB

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

d0:e5:92:2e:2b:69:fd:4d:0e:3f:fa:18:81:ab:b3:a6
Certificate

4c:b7:52:8f:b6:af:6a:84:17:f9:5a:4f:9d:04:8b:02:c4:d0:d2:58:52:d6:94:82:b2:66:a4:4a:3b:e3:c1:f4
Signer

.text
Size: 516KB - Virtual size: 516KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 11KB - Virtual size: 10KB