188b5d8bdb9af2671e0bdedd777bf775_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

188b5d8bdb9af2671e0bdedd777bf775_JaffaCakes118
Size

189KB
MD5

188b5d8bdb9af2671e0bdedd777bf775
SHA1

bddc3f9f97ca5cc82e93b0af2d5693f5b462655b
SHA256

24a0ff8397bb85212e9d9d5e4373c1e923d9dc8526643f51686b4b8678662944
SHA512

07ac2f613b9bc6efad41091cf9565ec4a3c06ff63fe5e2ab4e2f4e7110e63c3a9b56728b51eb7bce769e25bfa896edd47f001bbfc957595521dff8e88c1eb825
SSDEEP

3072:7j0QF0Xp70t+PyZpetl9RlhfE+9WNiUx/Gfyvump1YIx8C4TVDBGiKKzLNLCuKm5:f8XpotAyZajcVwYbRx8C4BDUinhLtKm5

Score

1^/10

Malware Config

Signatures

Files

188b5d8bdb9af2671e0bdedd777bf775_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e2b3db2f5ea765e6c2b5f8f441c558f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:2e:9e:25:44:7f:ee:84:82:4f:33:94:6c:09:51:9f
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

30/04/2009, 00:00

Not After

07/05/2010, 23:59

Subject

CN=Panda Security S.L,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Panda Security S.L,L=Bilbao,ST=Bizkaia,C=ES

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

be:65:05:54:50:d6:de:75:30:13:15:05:52:98:b2:bc:3a:ab:87:e9
Signer

Actual PE Digest

be:65:05:54:50:d6:de:75:30:13:15:05:52:98:b2:bc:3a:ab:87:e9

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameW
GetStringTypeW
GetExpandedNameW
CreateMutexW
lstrcmp
EnumCalendarInfoW
VirtualAlloc
EnumCalendarInfoA
lstrcpy
OpenFile
GetLongPathNameW
GetStartupInfoW
GlobalGetAtomNameW
CopyFileExA
Beep
GetWindowsDirectoryA
CreateFileMappingA
CreatePipe
GetDateFormatW
ReplaceFileA
DuplicateHandle
FileTimeToLocalFileTime
GetProcessHeaps
BeginUpdateResourceW
GetSystemDirectoryA
lstrcmpA

user32

GetAsyncKeyState
DefFrameProcA
GetMessageA
EnumDesktopsA
GetClassLongW
GetIconInfo
InvalidateRect
CreateDialogIndirectParamA
CheckDlgButton
LoadMenuA
GetTopWindow
SetCapture
CreateMenu
EnableMenuItem
CreateIcon
GetForegroundWindow
SetWindowTextA
wsprintfW
GetMessageW

advapi32

RegOpenKeyExW
RegOpenKeyExA
RegEnumValueA
RegCreateKeyExW

gdi32

SwapBuffers
SetICMProfileW
EnumMetaFile
SetSystemPaletteUse
FrameRgn
RemoveFontResourceExW
CreateFontIndirectA
CreatePalette
SelectClipPath
GetCharWidthFloatW

comdlg32

PrintDlgExA
PrintDlgA
PrintDlgExW

shell32

SHGetDiskFreeSpaceA
StrRChrW
StrCmpNW
StrChrW
SHCreateDirectoryExA
SHCreateDirectoryExW

ole32

CLSIDFromString
CoInitialize
CoFreeLibrary
CoCreateInstanceEx

oleaut32

VarCyFromStr
GetAltMonthNames
VarI4FromBool

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 166KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e2b3db2f5ea765e6c2b5f8f441c558f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

61:2e:9e:25:44:7f:ee:84:82:4f:33:94:6c:09:51:9fCertificate

Extended Key Usages

Key Usages

be:65:05:54:50:d6:de:75:30:13:15:05:52:98:b2:bc:3a:ab:87:e9Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

comdlg32

shell32

ole32

oleaut32

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 166KB - Virtual size: 168KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

61:2e:9e:25:44:7f:ee:84:82:4f:33:94:6c:09:51:9f
Certificate

be:65:05:54:50:d6:de:75:30:13:15:05:52:98:b2:bc:3a:ab:87:e9
Signer

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 166KB - Virtual size: 168KB