80549b8de1df109c68e468d9c06bb858_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

80549b8de1df109c68e468d9c06bb858_JaffaCakes118
Size

537KB
MD5

80549b8de1df109c68e468d9c06bb858
SHA1

ffced0f78d88ba69106d5e2fd112763f2788f802
SHA256

694a303dfacb38b453cf38e42b1faf12a91688d3c02e4467ff4f86071bd21c0a
SHA512

0bec511cbf0c076e72a31de9f5294e5699317e738cec4cfc83c8f56487568f14024aca57bf7f9a400c98ea02b2d3f01bdbe29b65846e59fe8b9303d8c752f336
SSDEEP

6144:t/L2FapyvljxykBunWM7QeQVTw+RlTFsO2i2299OJaVhyKQt9MnjzQxeTYu+xSnK:FfSlytW1eQVT3sO2iD6a+KQ01E+nK

Score

1^/10

Malware Config

Signatures

Files

80549b8de1df109c68e468d9c06bb858_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ae59200ad3f70d2504a2340db7a5097a

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d0:e5:92:2e:2b:69:fd:4d:0e:3f:fa:18:81:ab:b3:a6
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2016, 00:00

Not After

25/05/2017, 23:59

Subject

CN=Smart Union,O=Smart Union,POSTALCODE=127474,STREET=Beskudnikovsky boulevard 2,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

42:0f:44:14:23:82:ac:7e:4e:8f:da:31:cc:88:aa:9c:10:32:52:8e:89:92:9e:d3:a2:bb:4d:21:dd:c6:dd:b1
Signer

Actual PE Digest

42:0f:44:14:23:82:ac:7e:4e:8f:da:31:cc:88:aa:9c:10:32:52:8e:89:92:9e:d3:a2:bb:4d:21:dd:c6:dd:b1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
LoadLibraryA
VirtualAlloc

user32

GetScrollRange
IsWindowVisible
LoadCursorW
LoadBitmapA
RealGetWindowClassW
ShowWindow
GetUserObjectInformationA

advapi32

RegOpenKeyA
RegQueryValueExW

shell32

SHChangeNotify
SHFileOperation
SHFreeNameMappings
SHGetFolderPathW
DragQueryPoint
ExtractIconEx
ExtractAssociatedIconExW
Shell_NotifyIconW
ShellExecuteEx
SHQueryRecycleBinW

shlwapi

StrRChrA
StrStrIW

msvcrt

_XcptFilter
__getmainargs
__initenv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_wcsicmp
exit

Sections

.text
Size: 516KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae59200ad3f70d2504a2340db7a5097a

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

d0:e5:92:2e:2b:69:fd:4d:0e:3f:fa:18:81:ab:b3:a6Certificate

Extended Key Usages

Key Usages

42:0f:44:14:23:82:ac:7e:4e:8f:da:31:cc:88:aa:9c:10:32:52:8e:89:92:9e:d3:a2:bb:4d:21:dd:c6:dd:b1Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

shlwapi

msvcrt

Sections

.text Size: 516KB - Virtual size: 516KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 11KB - Virtual size: 10KB

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

d0:e5:92:2e:2b:69:fd:4d:0e:3f:fa:18:81:ab:b3:a6
Certificate

42:0f:44:14:23:82:ac:7e:4e:8f:da:31:cc:88:aa:9c:10:32:52:8e:89:92:9e:d3:a2:bb:4d:21:dd:c6:dd:b1
Signer

.text
Size: 516KB - Virtual size: 516KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 11KB - Virtual size: 10KB