General

Malware Config

Signatures

Files

• 692bbb135421e36241b1c7a69816fed8_JaffaCakes118

  .exe windows:4 windows x86 arch:x86

  1413371c5f6f8047191e433dc65884ce

  
  

  Code Sign

  19:1a:63:69:e1:32:89:4a:cc:8e:0e:9c:92:24:c4:e2

  Certificate

  Issuer

  CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  04-02-2015 00:00

  Not After

  04-02-2016 23:59

  Subject

  CN=Consortium Group ltd.,O=Consortium Group ltd.,POSTALCODE=00152,STREET=CORNER OF GR.MARLBOROUGH UN GR.GEORGE STR+STREET=3RD FLOOR\, C&h TOWERS,L=ROSEAU,ST=ROSEAU,C=DM

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  e6:d5:d3:01:52:0c:8d:57:18:0e:de:88:70:e9:98:60:b2:85:ab:42

  Signer

  Actual PE Digest

  e6:d5:d3:01:52:0c:8d:57:18:0e:de:88:70:e9:98:60:b2:85:ab:42

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  comctl32

  ImageList_GetIconSize

  ImageList_SetIconSize

  ImageList_EndDrag

  ImageList_DragShowNolock

  ord17

  ImageList_GetDragImage

  ImageList_Read

  ImageList_Write

  wininet

  HttpEndRequestA

  kernel32

  GetModuleHandleW

  LockResource

  WriteFile

  GetLastError

  CloseHandle

  CreateFileMappingA

  GetSystemInfo

  FindFirstFileA

  FindClose

  GetTickCount

  LCMapStringA

  GetStringTypeW

  GetStringTypeA

  LoadLibraryA

  GetOEMCP

  GetACP

  GetCPInfo

  FlushFileBuffers

  SetStdHandle

  HeapReAlloc

  HeapAlloc

  RtlUnwind

  VirtualFree

  HeapCreate

  HeapDestroy

  GetEnvironmentVariableA

  GetFileType

  GetStdHandle

  SetHandleCount

  GetEnvironmentStringsW

  GetEnvironmentStrings

  WideCharToMultiByte

  FreeEnvironmentStringsW

  FreeEnvironmentStringsA

  GetModuleFileNameA

  UnhandledExceptionFilter

  GetCurrentProcess

  SetFilePointer

  TerminateProcess

  HeapFree

  GetStartupInfoA

  VirtualAlloc

  ExitProcess

  GetVersion

  GetVersionExA

  GetModuleHandleA

  GetCommandLineA

  GetProcAddress

  QueryPerformanceCounter

  CreateThread

  LCMapStringW

  MultiByteToWideChar

  user32

  LoadCursorW

  IsDialogMessageA

  LoadIconW

  MessageBoxA

  CreateWindowExA

  CreateDialogParamA

  GetSystemMetrics

  GetClassNameA

  IsIconic

  IsRectEmpty

  IsWindow

  SetPropA

  SetRect

  SetScrollInfo

  GetWindowPlacement

  GetWindowRect

  SetMenuItemInfoA

  GetKeyboardType

  GetScrollPos

  PtInRect

  ShowScrollBar

  ShowCursor

  ShowOwnedPopups

  TranslateMessage

  ValidateRect

  WaitMessage

  RedrawWindow

  RegisterClipboardFormatA

  LoadStringA

  GetClientRect

  GetDC

  gdi32

  Rectangle

  SetBkColor

  TextOutW

  CreatePenIndirect

  GetClipBox

  CreatePen

  GetDeviceCaps

  comdlg32

  GetSaveFileNameA

  advapi32

  RegCloseKey

  RegCreateKeyExA

  AllocateLocallyUniqueId

  RegSetValueExW

  ole32

  CoTaskMemAlloc

  oleaut32

  VarDecRound

  VariantChangeType

  SafeArrayCreate

  SysAllocStringLen

  VarNumFromParseNum

  Sections

  .texT

  Size: 404KB - Virtual size: 401KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 8KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 12KB - Virtual size: 41KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 28KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ