a4adcadbee21838b0665a5fc9eb11b89_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a4adcadbee21838b0665a5fc9eb11b89_JaffaCakes118
Size

1.3MB
MD5

a4adcadbee21838b0665a5fc9eb11b89
SHA1

5c400d52700658880a1e66bb7b4d55f206d207ae
SHA256

8f2a167dd6f3f34ff6feb34e87d86b1cd606f8e8f1efb689c661c129e59206fe
SHA512

bf69d29e06c15a2470b67cf784793ca45dafc60d80ebdd55298f182c8238edfeb66ec599285f34599c93ec43bdd5294f003ea50609f2d8ea4b3b20331795751b
SSDEEP

24576:O54E9wEN2K/AvAePZAfqYBOzRY+3zgFOFz1+UDon2+E7GJE5Wsver2pJRGTEcKlg:E4SwpK/tCZAfqIOB3zu8z4UDo2hQE8e4

Score

1^/10

Malware Config

Signatures

Files

a4adcadbee21838b0665a5fc9eb11b89_JaffaCakes118
.zip
efriendplus.exe
.exe windows:5 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Code Sign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15-06-2016 00:00

Not After

15-06-2024 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:81:c0:e9:60:79:31:6f:7e:89:83:4b
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

18-11-2019 10:01

Not After

03-01-2021 05:50

Subject

SERIALNUMBER=110111-0168769,CN=Korea Investment & Securities Co.\, Ltd,O=Korea Investment & Securities Co.\, Ltd,STREET=88\, Uisadang-daero,L=Yeongdeungpo-gu,ST=Seoul,C=KR,1.3.6.1.4.1.311.60.2.1.3=#13024b52,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:90:20:77:61:c4:26:dd:94:50:03:0d
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

14-06-2018 10:00

Not After

18-03-2029 10:00

Subject

CN=GlobalSign TSA for Advanced - G3 - 003-01,O=GMO GlobalSign K.K.,C=JP

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02-08-2011 10:00

Not After

29-03-2029 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18-03-2009 10:00

Not After

18-03-2029 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:5c:81:d2:2d:c0:b6:cf:5f:3f:89:0c:84:34:ed:a1:46:7b:11:cc:91:3f:f0:3d:c9:31:18:a9:59:03:90:4d
Signer

Actual PE Digest

1b:5c:81:d2:2d:c0:b6:cf:5f:3f:89:0c:84:34:ed:a1:46:7b:11:cc:91:3f:f0:3d:c9:31:18:a9:59:03:90:4d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 123KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

saxjmxzv
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mznjmaar
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

baa93d47220682c04d92f7797d9224ce

Code Sign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0fCertificate

Extended Key Usages

Key Usages

58:81:c0:e9:60:79:31:6f:7e:89:83:4bCertificate

Extended Key Usages

Key Usages

33:90:20:77:61:c4:26:dd:94:50:03:0dCertificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:31:89:c6:50:04Certificate

Key Usages

04:00:00:00:00:01:21:58:53:08:a2Certificate

Key Usages

1b:5c:81:d2:2d:c0:b6:cf:5f:3f:89:0c:84:34:ed:a1:46:7b:11:cc:91:3f:f0:3d:c9:31:18:a9:59:03:90:4dSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comctl32

Sections

Size: 123KB - Virtual size: 332KB

.rsrc Size: 23KB - Virtual size: 41KB

.idata Size: 512B - Virtual size: 4KB

Size: 512B - Virtual size: 2.1MB

saxjmxzv Size: 1.2MB - Virtual size: 1.2MB

mznjmaar Size: 512B - Virtual size: 4KB

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

58:81:c0:e9:60:79:31:6f:7e:89:83:4b
Certificate

33:90:20:77:61:c4:26:dd:94:50:03:0d
Certificate

04:00:00:00:00:01:31:89:c6:50:04
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

1b:5c:81:d2:2d:c0:b6:cf:5f:3f:89:0c:84:34:ed:a1:46:7b:11:cc:91:3f:f0:3d:c9:31:18:a9:59:03:90:4d
Signer

.rsrc
Size: 23KB - Virtual size: 41KB

.idata
Size: 512B - Virtual size: 4KB

saxjmxzv
Size: 1.2MB - Virtual size: 1.2MB

mznjmaar
Size: 512B - Virtual size: 4KB