913dcf0a719e612f871130a8a879e872_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

913dcf0a719e612f871130a8a879e872_JaffaCakes118
Size

2.0MB
MD5

913dcf0a719e612f871130a8a879e872
SHA1

678c50e9d301b3798062301a08c0d989369572f0
SHA256

3ba07dc3621f3764f22fad16d2a6ae0a87c9b75fb7a9fca66e55bab3c95571d3
SHA512

30f694e5f46ca1dd99beb2c0916fa302ee8235e12ea7de3c2cb2b0ff5c3c76fd55479c8a59b16840d58db5359f3a443ef69d2d61b0d13b39cd27fbe3bc5d389a
SSDEEP

24576:5vnS4xaEJc90P4S8fzNVg1AHfQvr0FIaqUpWUtbmgJs/tUiUuiBmKEjPoQoeGmwz:sCL4Hf53f40SD8Gu3B/K7No6SO0

Score

1^/10

Malware Config

Signatures

Files

913dcf0a719e612f871130a8a879e872_JaffaCakes118
.dll windows:6 windows x86 arch:x86

bf975d1ef12b1a1233e3fcb214cc5758

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0e:c7:89:17:b2:30:2a:52:2b:d5:c9:eb:12:4a:6c:c7
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

05/07/2019, 00:00

Not After

07/07/2020, 12:00

Subject

CN=Shenzhen Thinksky Technology Co.\,Ltd,OU=R&D Dept.,O=Shenzhen Thinksky Technology Co.\,Ltd,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:35:d4:a4:de:d0:85:ce:eb:9c:f8:15:90:48:21:4d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/07/2019, 00:00

Not After

07/07/2020, 12:00

Subject

CN=Shenzhen Thinksky Technology Co.\,Ltd,OU=R&D Dept.,O=Shenzhen Thinksky Technology Co.\,Ltd,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

a2:8f:13:33:19:81:f7:b3:15:4d:30:81:20:40:68:af:06:d7:6e:fc:c9:37:a1:84:20:76:52:af:e5:4e:ed:3c
Signer

Actual PE Digest

a2:8f:13:33:19:81:f7:b3:15:4d:30:81:20:40:68:af:06:d7:6e:fc:c9:37:a1:84:20:76:52:af:e5:4e:ed:3c

Digest Algorithm

sha256

PE Digest Matches

true

18:ab:de:99:14:30:5d:48:06:55:1b:ba:d6:4f:86:9f:7b:a5:43:74
Signer

Actual PE Digest

18:ab:de:99:14:30:5d:48:06:55:1b:ba:d6:4f:86:9f:7b:a5:43:74

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\OpenSource\msvc\lib\x86\avfilter.pdb

Imports

avutil

av_opt_set_sample_fmt
avpriv_vga16_font
av_frame_get_plane_buffer
av_get_padded_bits_per_pixel
av_image_copy_plane
av_pix_fmt_count_planes
av_frame_get_qp_table
av_color_range_name
av_color_primaries_name
av_color_transfer_name
av_color_space_name
av_image_alloc
av_reduce
av_mul_q
av_image_fill_max_pixsteps
av_log_get_level
av_fopen_utf8
av_bprint_clear
av_rescale_q_rnd
av_stereo3d_create_side_data
av_div_q
av_strcasecmp
av_hwframe_transfer_data
av_hwframe_transfer_get_formats
av_hwdevice_find_type_by_name
av_gettime
av_frame_get_buffer
av_hwframe_ctx_init
av_hwframe_map
av_hwframe_ctx_create_derived
av_hwdevice_get_hwframe_constraints
av_hwframe_constraints_free
av_frame_new_side_data
av_compare_ts
av_read_image_line2
av_write_image_line2
av_buffer_alloc
av_frame_set_qp_table
av_opt_eval_flags
av_parse_video_size
av_display_rotation_get
av_image_get_linesize
av_spherical_tile_bounds
av_stereo3d_type_name
av_timecode_make_smpte_tc_string
av_reallocp_array
av_frame_unref
av_rescale_rnd
av_image_check_size
av_parse_video_rate
av_get_cpu_flags
av_get_channel_name
av_get_channel_layout_channel_index
av_gcd
av_frame_remove_side_data
av_frame_get_side_data
av_adler32_update
av_expr_parse_and_eval
av_d2q
av_parse_time
av_file_unmap
av_file_map
av_pixelutils_get_sad_fn
av_get_picture_type_char
av_fast_realloc
av_opt_get_sample_fmt
av_opt_get_int
av_gettime_relative
av_frame_make_writable
av_get_random_seed
av_lfg_init
av_parse_color
av_audio_fifo_free
avpriv_float_dsp_alloc
av_vlog
avpriv_vsnprintf
av_bprint_channel_layout
av_audio_fifo_peek_at
av_channel_layout_extract_channel
avpriv_cga_font
av_get_default_channel_layout
av_dynarray2_add
av_samples_alloc_array_and_samples
av_realloc_f
av_audio_fifo_drain
av_audio_fifo_peek
av_fast_malloc
av_usleep
av_strtok
av_rescale
av_frame_copy
av_audio_fifo_size
av_audio_fifo_read
av_audio_fifo_write
av_audio_fifo_alloc
av_hwframe_ctx_alloc
av_dict_set_int
avpriv_slicethread_free
avpriv_slicethread_execute
avpriv_slicethread_create
av_hwframe_get_buffer
av_get_token
av_asprintf
av_strlcpy
av_bprint_finalize
av_bprint_chars
av_image_fill_linesizes
av_samples_get_buffer_size
avpriv_set_systematic_pal2
av_buffer_pool_get
av_buffer_pool_uninit
av_buffer_pool_init
av_get_sample_fmt
av_parse_ratio
av_get_pix_fmt
av_pix_fmt_desc_get_id
av_pix_fmt_desc_next
av_strtod
av_get_extended_channel_layout
av_frame_clone
av_get_bits_per_pixel
av_frame_alloc
av_fifo_realloc2
av_fifo_generic_write
av_fifo_generic_read
av_fifo_space
av_fifo_size
av_fifo_freep
av_fifo_alloc
av_get_channel_layout
av_frame_move_ref
av_frame_ref
av_opt_set_bin
av_opt_set_int
av_int_list_length_for_size
av_malloc
av_sample_fmt_is_planar
av_get_bytes_per_sample
av_get_planar_sample_fmt
av_get_packed_sample_fmt
av_get_sample_fmt_name
av_image_check_size2
av_find_best_pix_fmt_of_2
av_get_pix_fmt_name
av_pix_fmt_desc_get
av_bprintf
av_bprint_init
av_memdup
av_realloc
av_default_item_name
av_opt_set
av_opt_next
av_opt_find
av_opt_get_key_value
av_opt_set_dict2
av_opt_set_dict
av_opt_free
av_opt_set_defaults
av_image_copy
av_frame_copy_props
av_frame_is_writable
av_frame_free
av_samples_copy
av_expr_free
av_expr_eval
av_expr_parse
av_get_channel_layout_string
av_buffer_unref
av_buffer_ref
av_strlcatf
av_rescale_q
av_dict_free
av_dict_set
av_dict_get
av_strdup
av_freep
av_free
av_realloc_array
av_calloc
av_mallocz_array
av_malloc_array
av_mallocz
av_strerror
av_get_media_type_string
av_samples_set_silence
av_buffer_allocz
av_get_channel_layout_nb_channels
av_log
avpriv_snprintf
av_hwdevice_ctx_create_derived
avpriv_strtod

avcodec

avcodec_encode_video2
av_fft_permute
av_fft_calc
av_fft_end
av_rdft_init
av_rdft_calc
av_rdft_end
av_dct_init
av_dct_calc
av_dct_end
avcodec_alloc_context3
avcodec_free_context
avcodec_parameters_to_context
avcodec_open2
av_init_packet
avcodec_flush_buffers
avcodec_decode_audio4
avcodec_dct_get_class
avcodec_dct_init
avcodec_dct_alloc
avcodec_close
avpriv_align_put_bits
avcodec_find_encoder
avpriv_init_elbg
avpriv_do_elbg
avcodec_decode_video2
avcodec_find_decoder
av_packet_unref
av_fft_init

avformat

avio_rl32
avio_open
avio_closep
avio_write
av_find_input_format
avformat_open_input
avformat_find_stream_info
av_read_frame
avformat_close_input
av_get_frame_filename
av_find_best_stream
av_seek_frame
avformat_match_stream_specifier
avio_size

swresample

swr_get_class
swr_init
swr_alloc_set_opts
swr_free
swr_convert
swr_next_pts
swr_get_delay
swr_set_channel_mapping
swr_set_matrix
swr_alloc

postproc

pp_postprocess
pp_get_mode_by_name_and_quality
pp_free_mode
pp_get_context
pp_free_context

swscale

sws_setColorspaceDetails
sws_getColorspaceDetails
sws_init_context
sws_scaleVec
sws_getCachedContext
sws_freeContext
sws_getContext
sws_scale
sws_getGaussianVec
sws_freeVec
sws_getCoefficients
sws_isSupportedInput
sws_isSupportedOutput
sws_isSupportedEndiannessConversion
sws_get_class
sws_alloc_context

kernel32

DisableThreadLibraryCalls
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
InitOnceBeginInitialize
InitOnceComplete
GetSystemTimeAsFileTime

msvcr120

fopen
fclose
erf
copysign
llrint
strcspn
qsort
ceil
_libm_sse2_tan_precise
_CIsinh
_CIatan2
fminf
_CIcosh
_libm_sse2_atan_precise
fmaxf
lrint
fmax
_libm_sse2_pow_precise
_hypot
fmin
_dclass
_CIfmod
roundf
round
exp2
sscanf
_libm_sse2_log10_precise
_libm_sse2_asin_precise
_libm_sse2_acos_precise
cbrt
_libm_sse2_log_precise
_strtoi64
_libm_sse2_exp_precise
_libm_sse2_sqrt_precise
_libm_sse2_sin_precise
fprintf
strstr
strspn
strncmp
strtol
memset
memcpy
strchr
memmove
abort
_fdclass
log2
_hypotf
cbrtf
fgets
strrchr
fread
fseek
ftell
lrintf
__iob_func
_except1
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__CppXcptFilter
_amsg_exit
free
_malloc_crt
_initterm
_initterm_e
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
_except_handler4_common
bsearch
rint
modf
_HUGE
floor
ldexp
fwrite
_libm_sse2_cos_precise
_errno

Exports

Exports

av_abuffersink_params_alloc
av_buffersink_get_channel_layout
av_buffersink_get_channels
av_buffersink_get_format
av_buffersink_get_frame
av_buffersink_get_frame_flags
av_buffersink_get_frame_rate
av_buffersink_get_h
av_buffersink_get_hw_frames_ctx
av_buffersink_get_sample_aspect_ratio
av_buffersink_get_sample_rate
av_buffersink_get_samples
av_buffersink_get_time_base
av_buffersink_get_type
av_buffersink_get_w
av_buffersink_params_alloc
av_buffersink_set_frame_size
av_buffersrc_add_frame
av_buffersrc_add_frame_flags
av_buffersrc_close
av_buffersrc_get_nb_failed_requests
av_buffersrc_parameters_alloc
av_buffersrc_parameters_set
av_buffersrc_write_frame
av_filter_ffversion
av_filter_iterate
avfilter_add_matrix
avfilter_all_channel_layouts
avfilter_config_links
avfilter_configuration
avfilter_free
avfilter_get_by_name
avfilter_get_class
avfilter_get_matrix
avfilter_graph_alloc
avfilter_graph_alloc_filter
avfilter_graph_config
avfilter_graph_create_filter
avfilter_graph_dump
avfilter_graph_free
avfilter_graph_get_filter
avfilter_graph_parse
avfilter_graph_parse2
avfilter_graph_parse_ptr
avfilter_graph_queue_command
avfilter_graph_request_oldest
avfilter_graph_send_command
avfilter_graph_set_auto_convert
avfilter_init_dict
avfilter_init_str
avfilter_inout_alloc
avfilter_inout_free
avfilter_insert_filter
avfilter_license
avfilter_link
avfilter_link_free
avfilter_link_get_channels
avfilter_link_set_closed
avfilter_make_format64_list
avfilter_mul_matrix
avfilter_next
avfilter_pad_count
avfilter_pad_get_name
avfilter_pad_get_type
avfilter_process_command
avfilter_register
avfilter_register_all
avfilter_sub_matrix
avfilter_transform
avfilter_version

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 509KB - Virtual size: 508KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf975d1ef12b1a1233e3fcb214cc5758

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

0e:c7:89:17:b2:30:2a:52:2b:d5:c9:eb:12:4a:6c:c7Certificate

Extended Key Usages

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

01:35:d4:a4:de:d0:85:ce:eb:9c:f8:15:90:48:21:4dCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

a2:8f:13:33:19:81:f7:b3:15:4d:30:81:20:40:68:af:06:d7:6e:fc:c9:37:a1:84:20:76:52:af:e5:4e:ed:3cSigner

18:ab:de:99:14:30:5d:48:06:55:1b:ba:d6:4f:86:9f:7b:a5:43:74Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

avutil

avcodec

avformat

swresample

postproc

swscale

kernel32

msvcr120

Exports

Exports

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 509KB - Virtual size: 508KB

.data Size: 27KB - Virtual size: 44KB

_RDATA Size: 5KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 60KB - Virtual size: 59KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

0e:c7:89:17:b2:30:2a:52:2b:d5:c9:eb:12:4a:6c:c7
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

01:35:d4:a4:de:d0:85:ce:eb:9c:f8:15:90:48:21:4d
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

a2:8f:13:33:19:81:f7:b3:15:4d:30:81:20:40:68:af:06:d7:6e:fc:c9:37:a1:84:20:76:52:af:e5:4e:ed:3c
Signer

18:ab:de:99:14:30:5d:48:06:55:1b:ba:d6:4f:86:9f:7b:a5:43:74
Signer

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 509KB - Virtual size: 508KB

.data
Size: 27KB - Virtual size: 44KB

_RDATA
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 60KB - Virtual size: 59KB