19fb1b610cb224e9441f962d04e263f2_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

19fb1b610cb224e9441f962d04e263f2_JaffaCakes118
Size

304KB
MD5

19fb1b610cb224e9441f962d04e263f2
SHA1

afd8e08baeff92d8f473bcfbdbc1c13d89e971ae
SHA256

05e06709523fd798da963c2c24254de0fcca6c57e1052996798ecc74ff43b41f
SHA512

6a5a32a0638922fdcea6dc4af508f40bb06a7c4abcf482af1dff94d604c1f4e8df56b16c03574c9b4da9cdb5dcb6365bd1b9cfa6b543805cb5d3a07511b176e8
SSDEEP

6144:S2mUkzPrZt+XAJAHg3UiRusOrFxQYj85LLqCAXFYQYwGyhazbCkIGUNv:SFzjZtcAJAHg3RRcrFxtj85LLqclwtIE

Score

1^/10

Malware Config

Signatures

Files

19fb1b610cb224e9441f962d04e263f2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d534daafc4918445c7de43db445a3d8b

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

31:d8:52:f5:fc:a1:a5:96:6b:5e:d0:8a:14:82:5c:54
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

04-02-2021 00:00

Not After

04-02-2022 23:59

Subject

CN=BBT KLA d.o.o.,O=BBT KLA d.o.o.,POSTALCODE=2000,STREET=Mlinska ulica 22,L=Maribor,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:fd:6d:30:fc:a3:ca:51:a8:1b:bc:64:0e:35:03:2d
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

01-02-2010 00:00

Not After

18-01-2038 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3e:40:74:d2:1b:11:6e:fc:99:fe:29:39:46:bb:5c:1f:00:4c:96:43
Signer

Actual PE Digest

3e:40:74:d2:1b:11:6e:fc:99:fe:29:39:46:bb:5c:1f:00:4c:96:43

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceW
HeapAlloc
ZombifyActCtx
SetHandleInformation
GetTickCount
FindNextVolumeMountPointA
SizeofResource
MapUserPhysicalPagesScatter
GetTimeFormatW
HeapValidate
GetLocaleInfoA
ExitThread
CreateJobObjectA
GetConsoleAliasesW
LocalAlloc
SetConsoleCtrlHandler
VirtualProtect
GetCurrentProcessId
lstrcpyW
LocalFileTimeToFileTime
SetConsoleCursorPosition
lstrlenA
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetStartupInfoA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
IsBadReadPtr
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
ReadFile
CloseHandle
CreateFileA
GetModuleHandleA

gdi32

GetBoundsRect

winhttp

WinHttpAddRequestHeaders

Exports

Exports

Smoke

Sections

.text
Size: 219KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d534daafc4918445c7de43db445a3d8b

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

31:d8:52:f5:fc:a1:a5:96:6b:5e:d0:8a:14:82:5c:54Certificate

Extended Key Usages

Key Usages

01:fd:6d:30:fc:a3:ca:51:a8:1b:bc:64:0e:35:03:2dCertificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

3e:40:74:d2:1b:11:6e:fc:99:fe:29:39:46:bb:5c:1f:00:4c:96:43Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

winhttp

Exports

Exports

Sections

.text Size: 219KB - Virtual size: 218KB

.rdata Size: 36KB - Virtual size: 36KB

.data Size: 10KB - Virtual size: 197KB

.rsrc Size: 29KB - Virtual size: 29KB

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

31:d8:52:f5:fc:a1:a5:96:6b:5e:d0:8a:14:82:5c:54
Certificate

01:fd:6d:30:fc:a3:ca:51:a8:1b:bc:64:0e:35:03:2d
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

3e:40:74:d2:1b:11:6e:fc:99:fe:29:39:46:bb:5c:1f:00:4c:96:43
Signer

.text
Size: 219KB - Virtual size: 218KB

.rdata
Size: 36KB - Virtual size: 36KB

.data
Size: 10KB - Virtual size: 197KB

.rsrc
Size: 29KB - Virtual size: 29KB