7cb4cbc85dc772e6a942a68953f09bdd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7cb4cbc85dc772e6a942a68953f09bdd_JaffaCakes118
Size

537KB
MD5

7cb4cbc85dc772e6a942a68953f09bdd
SHA1

23722e2edbe5f19cb8d6f370d038597c9c3f6840
SHA256

5bbff84b89824b4b873c6f8288c9533ffb089934ffe957292d4666e4125db01c
SHA512

6bd02f678749771f4fcaaf30936ad704563d809ced47625df467afdc9e27cbce49241045064f0af59ef609fe0fdb5f0e9fc87708e5f1539f9e30f1217e66c043
SSDEEP

6144:H/L2FapyvljxykBunWM7QeQVTw+RlTFsO2i2299OJaVhyKQt9MnjzQxeTYu+xS5H:TfSlytW1eQVT3sO2iD6a+KQ01E+5H

Score

1^/10

Malware Config

Signatures

Files

7cb4cbc85dc772e6a942a68953f09bdd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ae59200ad3f70d2504a2340db7a5097a

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d0:e5:92:2e:2b:69:fd:4d:0e:3f:fa:18:81:ab:b3:a6
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2016, 00:00

Not After

25/05/2017, 23:59

Subject

CN=Smart Union,O=Smart Union,POSTALCODE=127474,STREET=Beskudnikovsky boulevard 2,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

8b:fe:88:09:24:87:65:4b:49:52:e1:59:b2:78:c5:45:b8:ba:bf:1e:61:32:36:ec:a9:3c:58:17:62:60:ef:f2
Signer

Actual PE Digest

8b:fe:88:09:24:87:65:4b:49:52:e1:59:b2:78:c5:45:b8:ba:bf:1e:61:32:36:ec:a9:3c:58:17:62:60:ef:f2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
LoadLibraryA
VirtualAlloc

user32

GetScrollRange
IsWindowVisible
LoadCursorW
LoadBitmapA
RealGetWindowClassW
ShowWindow
GetUserObjectInformationA

advapi32

RegOpenKeyA
RegQueryValueExW

shell32

SHChangeNotify
SHFileOperation
SHFreeNameMappings
SHGetFolderPathW
DragQueryPoint
ExtractIconEx
ExtractAssociatedIconExW
Shell_NotifyIconW
ShellExecuteEx
SHQueryRecycleBinW

shlwapi

StrRChrA
StrStrIW

msvcrt

_XcptFilter
__getmainargs
__initenv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_wcsicmp
exit

Sections

.text
Size: 516KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae59200ad3f70d2504a2340db7a5097a

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

d0:e5:92:2e:2b:69:fd:4d:0e:3f:fa:18:81:ab:b3:a6Certificate

Extended Key Usages

Key Usages

8b:fe:88:09:24:87:65:4b:49:52:e1:59:b2:78:c5:45:b8:ba:bf:1e:61:32:36:ec:a9:3c:58:17:62:60:ef:f2Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

shlwapi

msvcrt

Sections

.text Size: 516KB - Virtual size: 516KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 11KB - Virtual size: 10KB

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

d0:e5:92:2e:2b:69:fd:4d:0e:3f:fa:18:81:ab:b3:a6
Certificate

8b:fe:88:09:24:87:65:4b:49:52:e1:59:b2:78:c5:45:b8:ba:bf:1e:61:32:36:ec:a9:3c:58:17:62:60:ef:f2
Signer

.text
Size: 516KB - Virtual size: 516KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 11KB - Virtual size: 10KB