b605e164c535de26d06569dd48148f23_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b605e164c535de26d06569dd48148f23_JaffaCakes118
Size

848KB
MD5

b605e164c535de26d06569dd48148f23
SHA1

003b3b2818fb239995205efbdb4ca26cec4d039c
SHA256

3f88d6ea85501c64e3f56697a5b0a915557b11329fe29e15aef357b128ca0cf8
SHA512

abc8335a6d441acf32d2a1f5558a945149d08985be11ec7ebd33e25794eccc11ff171027f5eb47ccb7fd25cbcf2fdcc3adb44c159971640bb608df5dbbf082c9
SSDEEP

12288:lg7b1iOFXJTo6yx3F4Fvw9DVtcT5Rx6Z5moD6Q47d07Qjam:lg3UOZan3UGDwT5Rw7moWQ5Sam

Score

1^/10

Malware Config

Signatures

Files

b605e164c535de26d06569dd48148f23_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f73244c7084ff6eeb43162b214f54cf8

Code Sign

43:64:3c:8f:61:53:45:cf:fb:48:85:13:69:9c:0b:7e
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

16/12/2016, 00:00

Not After

22/09/2017, 23:59

Subject

CN=\"Profi-Bineks\"\, OOO,O=\"Profi-Bineks\"\, OOO,POSTALCODE=125009,STREET=lane Brusov\, 11,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

8b:6a:2a:92:f9:67:fe:bf:a6:79:c3:bd:5f:d9:0c:2b:91:fc:40:23:ab:7a:9c:e1:a5:e4:b8:6d:eb:e2:fd:b9
Signer

Actual PE Digest

8b:6a:2a:92:f9:67:fe:bf:a6:79:c3:bd:5f:d9:0c:2b:91:fc:40:23:ab:7a:9c:e1:a5:e4:b8:6d:eb:e2:fd:b9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesW
VirtualAlloc
Sleep
FindClose
SuspendThread
LoadLibraryA
DeleteFileA
InterlockedExchange
SetFileAttributesW
GetSystemDirectoryA
GetProcessHeap
GetWindowsDirectoryW
InterlockedIncrement
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
ExitProcess
GetLongPathNameW
TerminateThread
MultiByteToWideChar
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetProcAddress
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetLastError
FlushFileBuffers
SetFilePointer
CloseHandle

user32

SwitchDesktop
ShowWindow
MessageBoxA
ReleaseDC

gdi32

CreateBitmap
SelectObject

ws2_32

recv

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 692KB - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f73244c7084ff6eeb43162b214f54cf8

Code Sign

43:64:3c:8f:61:53:45:cf:fb:48:85:13:69:9c:0b:7eCertificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

8b:6a:2a:92:f9:67:fe:bf:a6:79:c3:bd:5f:d9:0c:2b:91:fc:40:23:ab:7a:9c:e1:a5:e4:b8:6d:eb:e2:fd:b9Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ws2_32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 112KB - Virtual size: 108KB

.data Size: 692KB - Virtual size: 696KB

.rsrc Size: 4KB - Virtual size: 1KB

43:64:3c:8f:61:53:45:cf:fb:48:85:13:69:9c:0b:7e
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

8b:6a:2a:92:f9:67:fe:bf:a6:79:c3:bd:5f:d9:0c:2b:91:fc:40:23:ab:7a:9c:e1:a5:e4:b8:6d:eb:e2:fd:b9
Signer

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 112KB - Virtual size: 108KB

.data
Size: 692KB - Virtual size: 696KB

.rsrc
Size: 4KB - Virtual size: 1KB