a0fa68f4a0ca24b2f58355644fd56a91_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a0fa68f4a0ca24b2f58355644fd56a91_JaffaCakes118
Size

537KB
MD5

a0fa68f4a0ca24b2f58355644fd56a91
SHA1

b516bd82e9dad4065b36d180a4243b1e71247087
SHA256

965e9ff76f5d5631615d9a894ff33939d6cb46ee16ab55a55bbaabb8ebc4fa9d
SHA512

335cdc13f6afa2ec0105bf208ce426eeb3af7dbf688c94164fc0a5c04d82f63ff3c5bb7cf2c645df5cafcfabae66bb9c2b2e4e3bb51b886ab8a3c88bddcf7f73
SSDEEP

6144:Q/L2FapyvljxykBunWM7QeQVTw+RlTFsO2i2299OJaVhyKQt9MnjzQxeTYu+xStg:AfSlytW1eQVT3sO2iD6a+KQ01E+tg

Score

1^/10

Malware Config

Signatures

Files

a0fa68f4a0ca24b2f58355644fd56a91_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ae59200ad3f70d2504a2340db7a5097a

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d0:e5:92:2e:2b:69:fd:4d:0e:3f:fa:18:81:ab:b3:a6
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2016, 00:00

Not After

25/05/2017, 23:59

Subject

CN=Smart Union,O=Smart Union,POSTALCODE=127474,STREET=Beskudnikovsky boulevard 2,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

c7:04:af:0d:bb:47:7b:37:60:c8:08:94:7a:9d:48:e3:cb:40:eb:51:66:62:f1:c1:5f:e0:93:fd:86:8d:1e:08
Signer

Actual PE Digest

c7:04:af:0d:bb:47:7b:37:60:c8:08:94:7a:9d:48:e3:cb:40:eb:51:66:62:f1:c1:5f:e0:93:fd:86:8d:1e:08

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
LoadLibraryA
VirtualAlloc

user32

GetScrollRange
IsWindowVisible
LoadCursorW
LoadBitmapA
RealGetWindowClassW
ShowWindow
GetUserObjectInformationA

advapi32

RegOpenKeyA
RegQueryValueExW

shell32

SHChangeNotify
SHFileOperation
SHFreeNameMappings
SHGetFolderPathW
DragQueryPoint
ExtractIconEx
ExtractAssociatedIconExW
Shell_NotifyIconW
ShellExecuteEx
SHQueryRecycleBinW

shlwapi

StrRChrA
StrStrIW

msvcrt

_XcptFilter
__getmainargs
__initenv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_wcsicmp
exit

Sections

.text
Size: 516KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae59200ad3f70d2504a2340db7a5097a

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

d0:e5:92:2e:2b:69:fd:4d:0e:3f:fa:18:81:ab:b3:a6Certificate

Extended Key Usages

Key Usages

c7:04:af:0d:bb:47:7b:37:60:c8:08:94:7a:9d:48:e3:cb:40:eb:51:66:62:f1:c1:5f:e0:93:fd:86:8d:1e:08Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

shlwapi

msvcrt

Sections

.text Size: 516KB - Virtual size: 516KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 11KB - Virtual size: 10KB

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

d0:e5:92:2e:2b:69:fd:4d:0e:3f:fa:18:81:ab:b3:a6
Certificate

c7:04:af:0d:bb:47:7b:37:60:c8:08:94:7a:9d:48:e3:cb:40:eb:51:66:62:f1:c1:5f:e0:93:fd:86:8d:1e:08
Signer

.text
Size: 516KB - Virtual size: 516KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 11KB - Virtual size: 10KB