General

Malware Config

Signatures

Files

• a72a60a337085a51cfb5c4268281f604_JaffaCakes118

  .exe windows:5 windows x86 arch:x86

  7256249dafe773f8329c2a0a9c25a74b

  
  

  Code Sign

  06:91:71:2a:8e:58:ee:aa:4c:c0:90:5b:63:80:d7:5a

  Certificate

  Issuer

  CN=JGOCGMZT

  Not Before

  30-11-2018 12:27

  Not After

  31-12-2039 23:59

  Subject

  CN=JGOCGMZT

  Extended Key Usages

  ExtKeyUsageCodeSigning

  16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b

  Certificate

  Issuer

  CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

  Not Before

  31-12-2015 00:00

  Not After

  09-07-2019 18:40

  Subject

  CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  be:b0:c9:a7:54:f4:9d:3d:46:f7:14:40:43:8b:0f:de:37:92:d7:98

  Signer

  Actual PE Digest

  be:b0:c9:a7:54:f4:9d:3d:46:f7:14:40:43:8b:0f:de:37:92:d7:98

  Digest Algorithm

  sha1

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  VirtualAllocEx

  GetModuleHandleA

  user32

  IsGUIThread

  GetKeyboardLayout

  ReleaseCapture

  GetShellWindow

  EnumClipboardFormats

  IsCharAlphaNumericW

  GetThreadDesktop

  CharUpperA

  VkKeyScanA

  LoadCursorFromFileW

  GetDialogBaseUnits

  GetOpenClipboardWindow

  CloseWindowStation

  DestroyWindow

  GetFocus

  CloseClipboard

  IsCharLowerW

  GetWindowDC

  GetClipboardData

  VkKeyScanW

  CharUpperW

  IsCharUpperW

  GetQueueStatus

  CopyIcon

  DestroyMenu

  GetAsyncKeyState

  GetMessagePos

  CloseDesktop

  GetCaretBlinkTime

  IsWindowVisible

  OemKeyScan

  IsWindow

  GetMenuContextHelpId

  DestroyIcon

  GetWindowTextLengthW

  CharLowerA

  GetMenuCheckMarkDimensions

  IsMenu

  GetMenu

  GetDC

  GetClipboardViewer

  GetClipboardSequenceNumber

  EndMenu

  GetTopWindow

  DrawMenuBar

  LoadCursorFromFileA

  CountClipboardFormats

  gdi32

  AddFontResourceW

  GetSystemPaletteUse

  CloseFigure

  DeleteEnhMetaFile

  CreateHalftonePalette

  SaveDC

  CloseEnhMetaFile

  AddFontResourceA

  GetTextAlign

  UpdateColors

  SwapBuffers

  RealizePalette

  CreateSolidBrush

  DeleteColorSpace

  GetROP2

  CreateMetaFileW

  CloseMetaFile

  GetObjectType

  StrokePath

  GetFontLanguageInfo

  DeleteDC

  PathToRegion

  DeleteMetaFile

  GetGraphicsMode

  DeleteObject

  GdiGetBatchLimit

  advapi32

  RegQueryValueExA

  RegOpenKeyExW

  shell32

  SHGetMalloc

  SHGetPathFromIDListA

  SHGetSpecialFolderLocation

  ShellExecuteA

  Sections

  .text

  Size: 1.3MB - Virtual size: 1.3MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 756B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 733KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ