75cd7961e704c76b26c839550b39e989_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

75cd7961e704c76b26c839550b39e989_JaffaCakes118
Size

274KB
MD5

75cd7961e704c76b26c839550b39e989
SHA1

8c3e1be0c24c76ed35780667b8375f824b82916d
SHA256

ba14504562a9c52bb2805ad95d5fefce2e7fcac0f8065e935d8099bc87e910d6
SHA512

385042066caed9066c8389c9a1be6c8f766e38d39491c1f635943883b5518a51f1638d3755f5aeb342ac0bd86b3c7ccdb6fe96c9552e23e6d5b7bce574951e74
SSDEEP

6144:z6+IpNMJVCPNXnGp4EjW0Gmqnkdacxexs:G+IpOVCPovW0br

Score

1^/10

Malware Config

Signatures

Files

75cd7961e704c76b26c839550b39e989_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9f45c5ee2abfe6df03e16d337d460f85

Code Sign

61:03:dc:f6:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:12

Not After

25/07/2011, 19:22

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:15:23:0f:00:00:00:00:00:0a
Certificate

Issuer

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 21:57

Not After

07/03/2011, 21:57

Subject

CN=Microsoft Windows,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:07:02:dc:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

15/09/2005, 21:55

Not After

15/03/2016, 22:05

Subject

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

04:56:ac:fc:6f:92:f3:41:43:50:84:be:0d:30:db:4d:a9:3b:8b:59
Signer

Actual PE Digest

04:56:ac:fc:6f:92:f3:41:43:50:84:be:0d:30:db:4d:a9:3b:8b:59

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
CreateFileA
SetEvent
CreateEventA
LoadLibraryA
GetTickCount
GetCommandLineW
FreeEnvironmentStringsA
FatalExit
GetCurrentThread

user32

CloseClipboard
SetDoubleClickTime
OpenClipboard
GetSystemMetrics
GetClientRect
SetCapture

ntdll

_chkstk

gdi32

GdiFlush
DeleteDC

shell32

DuplicateIcon
CommandLineToArgvW

version

GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 149KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f45c5ee2abfe6df03e16d337d460f85

Code Sign

61:03:dc:f6:00:00:00:00:00:0cCertificate

Extended Key Usages

Key Usages

61:15:23:0f:00:00:00:00:00:0aCertificate

Extended Key Usages

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

61:07:02:dc:00:00:00:00:00:0bCertificate

Extended Key Usages

Key Usages

04:56:ac:fc:6f:92:f3:41:43:50:84:be:0d:30:db:4d:a9:3b:8b:59Signer

Headers

File Characteristics

Imports

kernel32

user32

ntdll

gdi32

shell32

version

Sections

.text Size: 47KB - Virtual size: 47KB

.data Size: 149KB - Virtual size: 150KB

.rsrc Size: 61KB - Virtual size: 60KB

.reloc Size: 8KB - Virtual size: 8KB

61:03:dc:f6:00:00:00:00:00:0c
Certificate

61:15:23:0f:00:00:00:00:00:0a
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

61:07:02:dc:00:00:00:00:00:0b
Certificate

04:56:ac:fc:6f:92:f3:41:43:50:84:be:0d:30:db:4d:a9:3b:8b:59
Signer

.text
Size: 47KB - Virtual size: 47KB

.data
Size: 149KB - Virtual size: 150KB

.rsrc
Size: 61KB - Virtual size: 60KB

.reloc
Size: 8KB - Virtual size: 8KB