178bc90ed065a61cb7bd37550fbe0e1d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

178bc90ed065a61cb7bd37550fbe0e1d_JaffaCakes118
Size

14.2MB
MD5

178bc90ed065a61cb7bd37550fbe0e1d
SHA1

33362824195d94a33c3f9131c9c23fe82a452c65
SHA256

3d4688142c9d436d304fe64288057d46523d29971c008ace88b9212fc8ce6452
SHA512

cfc139fce6a1571c769ea025842430199f45db13d3b77986f5b598dc50dd54c5f45fbaab275970945e784a900d6e5c125b31f9aa068dd1d54ff51e46f228e6e7
SSDEEP

393216:Fgta8uxMKiMQqcZ6ITczCQk+K8ncqVL2zNSjY:FIuKuQqc98/bLUT

Score

1^/10

Malware Config

Signatures

Files

178bc90ed065a61cb7bd37550fbe0e1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a08d0a3c1d1f4673feb6899c1b3492ce

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:43:bc:c9:22:92:c6:06:2d:36:aa:3f:5e:30:23:90
Certificate

Issuer

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Not Before

21/05/2010, 00:00

Not After

07/08/2012, 23:59

Subject

CN=Acunetix Ltd.,OU=Acunetix Development Department,O=Acunetix Ltd.,L=Ta' Xbiex,ST=Malta,C=MT

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e5:c2:57:51:88:84:bd:87:72:a2:71:c9:57:21:b8:e3:b4:76:d1:a4
Signer

Actual PE Digest

e5:c2:57:51:88:84:bd:87:72:a2:71:c9:57:21:b8:e3:b4:76:d1:a4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

kernel32

InitializeCriticalSection
CloseHandle
WaitForMultipleObjects
SetEvent
CreateThread
WaitForSingleObject
ResetEvent
MultiByteToWideChar
WideCharToMultiByte
GetLastError
CompareStringA
CompareStringW
LoadLibraryA
AreFileApisANSI
GetModuleFileNameA
GetModuleFileNameW
LocalFree
FormatMessageA
FormatMessageW
GetWindowsDirectoryA
SetFileAttributesA
SetFileAttributesW
RemoveDirectoryA
RemoveDirectoryW
CreateDirectoryA
CreateDirectoryW
DeleteFileA
DeleteFileW
GetShortPathNameA
lstrlenA
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryA
SetCurrentDirectoryA
GetTempPathA
GetTempFileNameA
FindClose
FindFirstFileA
FindFirstFileW
SetLastError
FindNextFileA
CreateFileA
CreateFileW
GetFileSize
SetFilePointer
ReadFile
SetFileTime
WriteFile
SetEndOfFile
CreateEventA
LeaveCriticalSection
EnterCriticalSection
Sleep
CreateProcessA
GetCommandLineW
GetCurrentThreadId
HeapAlloc
DeleteCriticalSection
TlsSetValue
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize

user32

DestroyWindow
PostMessageA
ShowWindow
MessageBoxA
KillTimer
EndDialog
SendMessageA
GetDlgItem
SetTimer
MessageBoxW
SetWindowTextW
SetWindowTextA
LoadStringW
LoadStringA
CharPrevA
DialogBoxParamA
GetWindowLongA
SetWindowLongA

oleaut32

VariantClear
SysAllocString

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a08d0a3c1d1f4673feb6899c1b3492ce

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

6a:43:bc:c9:22:92:c6:06:2d:36:aa:3f:5e:30:23:90Certificate

Extended Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

e5:c2:57:51:88:84:bd:87:72:a2:71:c9:57:21:b8:e3:b4:76:d1:a4Signer

Headers

File Characteristics

Imports

comctl32

kernel32

user32

oleaut32

Sections

.text Size: 90KB - Virtual size: 90KB

.rdata Size: 15KB - Virtual size: 15KB

.data Size: 12KB - Virtual size: 14KB

.rsrc Size: 3KB - Virtual size: 2KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

6a:43:bc:c9:22:92:c6:06:2d:36:aa:3f:5e:30:23:90
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

e5:c2:57:51:88:84:bd:87:72:a2:71:c9:57:21:b8:e3:b4:76:d1:a4
Signer

.text
Size: 90KB - Virtual size: 90KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 12KB - Virtual size: 14KB

.rsrc
Size: 3KB - Virtual size: 2KB