8a98ca67ec04eb95bbcc728a642cf73e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8a98ca67ec04eb95bbcc728a642cf73e_JaffaCakes118
Size

325KB
MD5

8a98ca67ec04eb95bbcc728a642cf73e
SHA1

6cef85fe977d81d2e1e29f5666221a619eb7d1a9
SHA256

619bd8d65328a36629d253bd94a492e629613c666f323d0c12810cd82a2de879
SHA512

2f2428f048321252bc9dd289cf23e875882beebfc3aae17867818251222151e57e66bc0e1ce312bd536c8af12074cf379fba566c48e0712b4f97c88fc6ff2e95
SSDEEP

6144:vhr46Vs2Vs43C2tW++Khr46Vs2Vs18ZNWpVk5hUNXNkRAQOYnwSirOw:vhr46Vs2Vs43CGWyhr46Vs2Vs1w4kUXP

Score

1^/10

Malware Config

Signatures

Files

8a98ca67ec04eb95bbcc728a642cf73e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

13c8adb3ef4712c225038c1851267571

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

ed:c3:f2:1b:e3:7e:ca:9f:f1:11:7f:f4:90:da:32:ea
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

18/04/2019, 00:00

Not After

17/04/2020, 23:59

Subject

CN=Pragramatic Limited,O=Pragramatic Limited,POSTALCODE=WA3 4HX,STREET=100a Twiss Green Lane Twiss Green Lane,L=Warrington,ST=Cheshire,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:58:93:de:b4:d6:93:18:da:ff:8e:5f:ef:f6:68:c4:26:94:64:48
Signer

Actual PE Digest

2e:58:93:de:b4:d6:93:18:da:ff:8e:5f:ef:f6:68:c4:26:94:64:48

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
VerQueryValueA

kernel32

GetConsoleCP
lstrcmpiA
GetExitCodeProcess
GetFileAttributesA
GetPrivateProfileStringA
FindNextFileA
GlobalAddAtomW
FindClose
FindFirstFileA
GetTimeZoneInformation
MultiByteToWideChar
SetFilePointer
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
SetStdHandle
GlobalLock
VirtualAlloc
HeapAlloc
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetStringTypeA
GetCurrentProcess
TerminateProcess
ExitProcess
GetShortPathNameA
GlobalUnlock
GetDateFormatA
DuplicateHandle
SetEndOfFile
FlushFileBuffers
WritePrivateProfileStringA
GetDiskFreeSpaceA
GetTempPathA
GetTimeFormatA
GlobalFindAtomW
RemoveDirectoryA
GetVolumeInformationW
ExitThread
HeapFree
GetModuleHandleW
GetProcAddress
GetLastError
FreeLibraryAndExitThread
CloseHandle
SetEvent
ConnectNamedPipe
GetVersionExA
IsBadReadPtr
LoadLibraryW
GetStringTypeW
LCMapStringA
HeapReAlloc
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion

user32

IsWindowEnabled
CloseClipboard
ScreenToClient
DrawTextA
MessageBoxIndirectA
EndDialog
InvalidateRect
BeginPaint
GetMessagePos
IsWindowVisible
LoadCursorA
LoadBitmapA
EndPaint
GetWindowLongA
CreatePopupMenu
DefWindowProcA
CharPrevA
CheckDlgButton
GetSystemMenu
SendMessageTimeoutA
SetCursor
CallWindowProcA
EmptyClipboard
SetScrollPos
EnableMenuItem
SendMessageA
SetWindowPos
GetClientRect
TrackPopupMenu

gdi32

GetClipBox
GetDeviceCaps
SetBkMode
GetStockObject
GetDIBits
CreateBitmap
SaveDC
SetViewportExtEx
ScaleWindowExtEx
EnumFontsA
RestoreDC
SetWindowExtEx
GetTextColor
SetTextColor
Rectangle

advapi32

FreeSid
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyW
AllocateAndInitializeSid
RegEnumValueW
RegEnumKeyW
RegQueryValueW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
AllocateLocallyUniqueId
RegDeleteValueW

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.f1f65
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13c8adb3ef4712c225038c1851267571

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

ed:c3:f2:1b:e3:7e:ca:9f:f1:11:7f:f4:90:da:32:eaCertificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

2e:58:93:de:b4:d6:93:18:da:ff:8e:5f:ef:f6:68:c4:26:94:64:48Signer

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

advapi32

Sections

.text Size: 42KB - Virtual size: 42KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 11KB - Virtual size: 131KB

.f1f65 Size: 261KB - Virtual size: 261KB

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

ed:c3:f2:1b:e3:7e:ca:9f:f1:11:7f:f4:90:da:32:ea
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

2e:58:93:de:b4:d6:93:18:da:ff:8e:5f:ef:f6:68:c4:26:94:64:48
Signer

.text
Size: 42KB - Virtual size: 42KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 11KB - Virtual size: 131KB

.f1f65
Size: 261KB - Virtual size: 261KB