9a259058a83ef86d09eb58fadc0fb734_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

9a259058a83ef86d09eb58fadc0fb734_JaffaCakes118
Size

3.2MB
MD5

9a259058a83ef86d09eb58fadc0fb734
SHA1

588ec3d490984f9cc7819cff4ef8a9dc529cf420
SHA256

04d2aed8de05c7fc15c4a9205e8372d92f17e172ebbe73e6f2adc7f7d48ff5ec
SHA512

c40d68394f4658e5375835bbfe1cc84ac1b4f3e3da6df8843afe9039be38dd150d0ffe6db41f826b8e40d811a592f2702299c6a01cc8571b2d27c5ba8767f04b
SSDEEP

49152:1RKCPTffmR+dINm3eIax+cqtpE59L239Btp627JAWnxWTjd:/mR++8OKv/eXjd

Score

1^/10

Malware Config

Signatures

Files

9a259058a83ef86d09eb58fadc0fb734_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4cc01c5888458a51fcb49aa4355a29d

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:fd:6f:28:a5:ee:da:a6:25:55:b6:4f:b8:cd:86:84
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

08/06/2016, 00:00

Not After

03/10/2018, 12:00

Subject

SERIALNUMBER=25923170,CN=SteelSeries ApS,O=SteelSeries ApS,POSTALCODE=2000,STREET=Dirch Passers Allé 27,L=Frederiksberg,C=DK,1.3.6.1.4.1.311.60.2.1.3=#1302444b,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:ad:e1:99:13:3f:c9:20:e3:48:7a:db:ab:98:9a:c5:6f:1f:0e:35
Signer

Actual PE Digest

7b:ad:e1:99:13:3f:c9:20:e3:48:7a:db:ab:98:9a:c5:6f:1f:0e:35

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

winmm

timeBeginPeriod

ws2_32

WSAGetOverlappedResult

kernel32

WriteFile
WriteConsoleW
WaitForSingleObject
VirtualFree
VirtualAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetThreadPriority
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
LoadLibraryA
LoadLibraryW
GetThreadContext
GetSystemInfo
GetStdHandle
GetQueuedCompletionStatus
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerA
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 163KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 978B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f4cc01c5888458a51fcb49aa4355a29d

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7Certificate

Key Usages

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14Certificate

Extended Key Usages

Key Usages

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

0d:fd:6f:28:a5:ee:da:a6:25:55:b6:4f:b8:cd:86:84Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

7b:ad:e1:99:13:3f:c9:20:e3:48:7a:db:ab:98:9a:c5:6f:1f:0e:35Signer

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.data Size: 163KB - Virtual size: 254KB

.idata Size: 1024B - Virtual size: 978B

.symtab Size: 512B - Virtual size: 4B

.rsrc Size: 48KB - Virtual size: 47KB

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

0d:fd:6f:28:a5:ee:da:a6:25:55:b6:4f:b8:cd:86:84
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

7b:ad:e1:99:13:3f:c9:20:e3:48:7a:db:ab:98:9a:c5:6f:1f:0e:35
Signer

.text
Size: 3.0MB - Virtual size: 3.0MB

.data
Size: 163KB - Virtual size: 254KB

.idata
Size: 1024B - Virtual size: 978B

.symtab
Size: 512B - Virtual size: 4B

.rsrc
Size: 48KB - Virtual size: 47KB