832ecbe7c0f9a3ea3554e96777068f4e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

832ecbe7c0f9a3ea3554e96777068f4e_JaffaCakes118
Size

479KB
MD5

832ecbe7c0f9a3ea3554e96777068f4e
SHA1

2531bc61ed46d2b2c2c51c856e693566b937f97f
SHA256

86d971cec6cab3b78f7763507125acf58bd4db1afaa10fe8862a5b10c747af52
SHA512

af2333510b08bd49cbdcd3b4a3d65666b39f41621b32246b47a0aa21db138f823d57942646db8be32a814e6ef195bc77de3397ee47129b78985470276fd14c3f
SSDEEP

12288:jEuzArh5Z9Mf0J+ksqIeGL6vwFtFhHbZ/oPCtG:2rh5Z9MMAk+L6etFxNQPR

Score

1^/10

Malware Config

Signatures

Files

832ecbe7c0f9a3ea3554e96777068f4e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6df986f8d3f5498ad5d9dcc09b0c43f7

Code Sign

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2031 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:1c:df:b7:c1:3c:e5:4b:19:3d:a9:f6:49:1d:eb:a1
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

02-01-2020 00:00

Not After

06-01-2023 12:00

Subject

CN=Playtech PLC,O=Playtech PLC,L=Douglas,C=IM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22-07-2014 00:00

Not After

21-07-2024 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

40:1a:c4:64:21:b3:13:21:03:0e:bb:e4:12:1a:c5:1d
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

02-04-2008 00:00

Not After

01-12-2037 23:59

Subject

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7f:aa:d4:d3:ff:7b:07:fb:e9:fd:c3:b7:07:fb:79:2c
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

16-02-2018 00:00

Not After

15-02-2021 23:59

Subject

CN=Playtech PLC,O=Playtech PLC,L=Douglas,C=IM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-10-2019 00:00

Not After

17-10-2030 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ca:cc:c7:28:f8:f0:6e:3a:0f:d0:d4:a1:65:1a:1e:c8:b9:ae:67:ed:ba:dc:53:8a:88:c0:11:ae:d7:ef:98:38
Signer

Actual PE Digest

ca:cc:c7:28:f8:f0:6e:3a:0f:d0:d4:a1:65:1a:1e:c8:b9:ae:67:ed:ba:dc:53:8a:88:c0:11:ae:d7:ef:98:38

Digest Algorithm

sha256

PE Digest Matches

true

23:53:3c:a5:95:c9:33:6b:ad:40:b5:c9:3c:bc:da:52:08:ff:79:4a
Signer

Actual PE Digest

23:53:3c:a5:95:c9:33:6b:ad:40:b5:c9:3c:bc:da:52:08:ff:79:4a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

gethostbyname

wintrust

WinVerifyTrustEx

wininet

HttpOpenRequestA

shlwapi

SHDeleteKeyW

version

VerQueryValueW

user32

CharUpperW

gdi32

CreateFontIndirectW

advapi32

RegEnumValueW

shell32

SHGetPathFromIDListW

ole32

CoCreateInstance

oleaut32

SysAllocString

comctl32

ord17

Sections

.text
Size: 398KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6df986f8d3f5498ad5d9dcc09b0c43f7

Code Sign

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39Certificate

Key Usages

04:1c:df:b7:c1:3c:e5:4b:19:3d:a9:f6:49:1d:eb:a1Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8Certificate

Extended Key Usages

Key Usages

40:1a:c4:64:21:b3:13:21:03:0e:bb:e4:12:1a:c5:1dCertificate

Key Usages

7f:aa:d4:d3:ff:7b:07:fb:e9:fd:c3:b7:07:fb:79:2cCertificate

Extended Key Usages

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

ca:cc:c7:28:f8:f0:6e:3a:0f:d0:d4:a1:65:1a:1e:c8:b9:ae:67:ed:ba:dc:53:8a:88:c0:11:ae:d7:ef:98:38Signer

23:53:3c:a5:95:c9:33:6b:ad:40:b5:c9:3c:bc:da:52:08:ff:79:4aSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ws2_32

wintrust

wininet

shlwapi

version

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

Sections

.text Size: 398KB - Virtual size: 1.9MB

.rsrc Size: 64KB - Virtual size: 64KB

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

04:1c:df:b7:c1:3c:e5:4b:19:3d:a9:f6:49:1d:eb:a1
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

40:1a:c4:64:21:b3:13:21:03:0e:bb:e4:12:1a:c5:1d
Certificate

7f:aa:d4:d3:ff:7b:07:fb:e9:fd:c3:b7:07:fb:79:2c
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

ca:cc:c7:28:f8:f0:6e:3a:0f:d0:d4:a1:65:1a:1e:c8:b9:ae:67:ed:ba:dc:53:8a:88:c0:11:ae:d7:ef:98:38
Signer

23:53:3c:a5:95:c9:33:6b:ad:40:b5:c9:3c:bc:da:52:08:ff:79:4a
Signer

.text
Size: 398KB - Virtual size: 1.9MB

.rsrc
Size: 64KB - Virtual size: 64KB