0e73c9a8c7b898eff4900392bba8e9ea_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0e73c9a8c7b898eff4900392bba8e9ea_JaffaCakes118
Size

101KB
MD5

0e73c9a8c7b898eff4900392bba8e9ea
SHA1

c2b8bfcd6b43c1169d9cfd27115e6b9757ef9978
SHA256

dc73c50e91e632a9e6dfc53fddbcc62b40810c272fd7a8c4bef034bc8fbe684f
SHA512

f1411cd83ac5bf3124b27c415b6b495e2e3d0ec7ec1336688072dcb882206e7d5c296a6c4a6763c0e07f369ec7510c98fd20c3b0bdb00a8cb02036edcc9c4037
SSDEEP

1536:CBZBBRbGD6XE0krmEQt/GcC4jFd53G8ySI7a50RFWEReSmQRI2egdr0K:ERbgDbiYcCAHFG8R5MReP8I2ewrT

Score

1^/10

Malware Config

Signatures

Files

0e73c9a8c7b898eff4900392bba8e9ea_JaffaCakes118
.exe windows:5 windows x86 arch:x86

74154421bb0b3fcc89e574cef7d61789

Code Sign

47:23:1e:db:86:d3:f0:a1:4c:28:6b:15:4d:05:d4:81
Certificate

Issuer

CN=WPKMEHJAEELVLJGQEC

Not Before

29/05/2019, 16:06

Not After

31/12/2039, 23:59

Subject

CN=WPKMEHJAEELVLJGQEC

Extended Key Usages

ExtKeyUsageCodeSigning

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

27/04/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

30/05/2020, 10:48

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

f6:91:46:2a:ce:e9:5d:67:33:e4:6c:78:e3:13:c4:b6:93:3a:ba:aa
Signer

Actual PE Digest

f6:91:46:2a:ce:e9:5d:67:33:e4:6c:78:e3:13:c4:b6:93:3a:ba:aa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetPriorityClass
GetPrivateProfileIntA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
GetSystemDefaultLangID
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTempPathW
GetTickCount
GetVersion
GetVersionExW
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
InterlockedCompareExchange
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByte
IsDebuggerPresent
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
GetLastError
LockResource
MoveFileWithProgressA
MulDiv
MultiByteToWideChar
OpenEventW
Process32First
QueryPerformanceCounter
RaiseException
ReadConsoleOutputCharacterW
ReadFile
SetCommState
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetProcessWorkingSetSize
SetThreadPriority
SetUnhandledExceptionFilter
SetWaitableTimer
SizeofResource
Sleep
SystemTimeToFileTime
TerminateProcess
UnhandledExceptionFilter
UnregisterWait
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteConsoleOutputW
WriteFile
lstrcatW
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenA
lstrlenW
VirtualAllocEx
GetFileSize
GetFileAttributesA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryA
GetCurrencyFormatA
GetConsoleScreenBufferInfo
GetComputerNameW
GetCommandLineW
GetCPInfo
GetACP
FreeResource
FreeLibraryAndExitThread
FreeLibrary
FreeConsole
FormatMessageW
FormatMessageA
FlushViewOfFile
FlushFileBuffers
FindResourceA
FindNextFileA
FindFirstFileA
FindClose
FillConsoleOutputCharacterW
ExpandEnvironmentStringsW
ExitProcess
EnumSystemCodePagesW
EnumResourceLanguagesA
EnumDateFormatsExW
DisableThreadLibraryCalls
DeleteFileA
CreateThread
CreateProcessA
CreateMutexW
CreateFileW
CreateFileA
CreateEventW
CreateDirectoryW
CloseHandle
CancelWaitableTimer
LocalUnlock
CancelIo

user32

DestroyMenu
DestroyWindow
DialogBoxIndirectParamA
DispatchMessageA
DrawFocusRect
DrawMenuBar
DrawTextA
DrawTextExA
EmptyClipboard
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndDialog
EndPaint
EnumChildWindows
EnumThreadWindows
DestroyCursor
ExcludeUpdateRgn
ExitWindowsEx
FillRect
FindWindowExA
FlashWindow
FrameRect
GetActiveWindow
GetAsyncKeyState
GetCapture
GetCaretPos
GetClassInfoA
GetClassInfoExA
GetClassLongA
GetClientRect
GetClipboardData
GetClipboardFormatNameA
GetCursorPos
GetDC
GetDialogBaseUnits
GetDlgCtrlID
GetDlgItem
GetDlgItemInt
GetDlgItemTextA
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetKeyState
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuStringA
GetMessageA
GetMessagePos
GetMessageTime
GetParent
GetPriorityClipboardFormat
GetPropA
GetScrollInfo
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColor
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetUpdateRect
GetUpdateRgn
GetWindow
GetWindowDC
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
HideCaret
InSendMessage
InflateRect
InsertMenuA
IntersectRect
InvalidateRect
InvalidateRgn
InvertRect
IsCharAlphaA
IsCharAlphaNumericA
IsChild
IsClipboardFormatAvailable
IsDialogMessageA
IsDlgButtonChecked
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
LoadMenuA
MessageBeep
MessageBoxA
ModifyMenuA
MoveWindow
OemToCharA
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RegisterClassA
RegisterClassExA
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ReplyMessage
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendMessageA
SetActiveWindow
SetCapture
SetCaretPos
SetClassLongA
SetClipboardData
SetCursor
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetMenu
SetMessageQueue
SetParent
SetPropA
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetUserObjectSecurity
SetWindowLongA
SetWindowPos
SetWindowTextA
SetWindowsHookExA
ShowCaret
ShowCursor
ShowScrollBar
ShowWindow
ToAsciiEx
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
ValidateRect
VkKeyScanA
WaitMessage
WindowFromPoint
DestroyCaret
DeleteMenu
DeferWindowPos
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
DdeUninitialize
DdeUnaccessData
DdeQueryStringA
DdePostAdvise
DdeNameService
DdeKeepStringHandle
DdeInitializeA
DdeGetLastError
DdeGetData
DdeFreeStringHandle
DdeFreeDataHandle
DdeEnableCallback
DdeDisconnect
DdeCreateStringHandleA
DdeCreateDataHandle
DdeConnectList
DdeConnect
DdeCmpStringHandles
DdeClientTransaction
DdeAddData
DdeAccessData
CreateWindowExA
CreateMenu
CreateDialogParamA
CreateCaret
CloseClipboard
ClientToScreen
CheckRadioButton
CheckMenuItem
CheckDlgButton
CharUpperA
CharPrevW
CharLowerA
CallWindowProcA
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
AppendMenuA
EqualRect

gdi32

GetTextAlign
bMakePathNameW
SetBrushOrgEx
RemoveFontResourceExW
RectVisible
GetGlyphOutlineWow
GetCurrentPositionEx
GetCharWidthFloatA
GetCharWidth32A
GdiSetPixelFormat
GdiEntry6
GdiDescribePixelFormat
GdiDeleteSpoolFileHandle
GdiAlphaBlend
FONTOBJ_pfdg
EnumMetaFile
EnumICMProfilesA
CheckColorsInGamut
CreateColorSpaceA
DeviceCapabilitiesExA

comdlg32

ChooseFontA
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA

advapi32

RegOpenKeyA
RegQueryValueExA
StartServiceCtrlDispatcherW
SetServiceStatus
ReportEventW
RegisterServiceCtrlHandlerW
RegisterEventSourceW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

ole32

CoCreateInstance
CoUninitialize
CoInitialize

shlwapi

wnsprintfA

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74154421bb0b3fcc89e574cef7d61789

Code Sign

47:23:1e:db:86:d3:f0:a1:4c:28:6b:15:4d:05:d4:81Certificate

Extended Key Usages

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19Certificate

Extended Key Usages

Key Usages

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49Certificate

Extended Key Usages

Key Usages

f6:91:46:2a:ce:e9:5d:67:33:e4:6c:78:e3:13:c4:b6:93:3a:ba:aaSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

shlwapi

Sections

.text Size: 69KB - Virtual size: 69KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 13KB - Virtual size: 12KB

47:23:1e:db:86:d3:f0:a1:4c:28:6b:15:4d:05:d4:81
Certificate

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

f6:91:46:2a:ce:e9:5d:67:33:e4:6c:78:e3:13:c4:b6:93:3a:ba:aa
Signer

.text
Size: 69KB - Virtual size: 69KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 13KB - Virtual size: 12KB