General

Malware Config

Signatures

Files

• 694460f029e15c051061b04408bde57a_JaffaCakes118

  .exe windows:5 windows x86 arch:x86

  667ec7944dd149516d8027915f3463c3

  
  

  Code Sign

  35:97:31:87:f3:87:3a:07:32:7e:ce:58:0c:9b:7e:da

  Certificate

  Issuer

  OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

  Not Before

  08-11-2006 00:00

  Not After

  07-11-2021 23:59

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageNetscapeServerGatedCrypto

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  5d:0a:18:45:d8:50:07:cd:04:0b:35:0f:48:c5:f7:21

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  17-12-2014 00:00

  Not After

  17-12-2015 23:59

  Subject

  CN=App secure LLC,O=App secure LLC,L=Wilmington,ST=Delaware,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  58:3b:4a:33:01:86:8b:cc:d1:68:40:e2:c4:1a:d3:02:fa:ee:cb:34

  Signer

  Actual PE Digest

  58:3b:4a:33:01:86:8b:cc:d1:68:40:e2:c4:1a:d3:02:fa:ee:cb:34

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  LoadLibraryA

  GetProcAddress

  VirtualAlloc

  VirtualFree

  user32

  CopyRect

  advapi32

  RegCloseKey

  ole32

  OleInitialize

  shell32

  SHGetSpecialFolderPathW

  oleaut32

  SystemTimeToVariantTime

  shlwapi

  StrStrIW

  gdi32

  CreateCompatibleBitmap

  comdlg32

  GetFileTitleW

  winspool.drv

  ClosePrinter

  oledlg

  OleUIBusyW

  urlmon

  URLDownloadToFileW

  dbghelp

  MiniDumpWriteDump

  iphlpapi

  GetAdaptersInfo

  rpcrt4

  UuidToStringA

  oleacc

  LresultFromObject

  wininet

  InternetGetLastResponseInfoW

  Sections

  .text

  Size: 627KB - Virtual size: 1.8MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 38KB - Virtual size: 40KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE