1a25b57841910b5bd4e72b726d0b917c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1a25b57841910b5bd4e72b726d0b917c_JaffaCakes118
Size

876KB
MD5

1a25b57841910b5bd4e72b726d0b917c
SHA1

df1b83e0436bc22e8b05b7a7b5623c07ff980e27
SHA256

3a7704ebcc3b64077efe178530b38fc6c9b4db456359cb61602c7eb6530de66b
SHA512

7a0ce818388920e6dd71add887228502b2a14062bafbb50abe9e0b3c6ff57f00d3e15c3d991ecdbdb4ec695899c1e2b66720e62157beb703d37ed5429810da91
SSDEEP

24576:8zcs0GDqLUaWhkKXibkAuauC/ld1K9T0FeEl8D6a:scs0/L/WhkKXibkAuOld1KMeEWGa

Score

1^/10

Malware Config

Signatures

Files

1a25b57841910b5bd4e72b726d0b917c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9444d32a60de8c0c44cca87622658fe

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

01/02/2008, 00:00

Not After

31/01/2009, 23:59

Subject

CN=InstallProvider Inc.,O=InstallProvider Inc.,POSTALCODE=DM,STREET=15 Cornwall Street,L=Roseau,ST=Dominica,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptGenKey
RegUnLoadKeyA
ChangeServiceConfigA
AllocateAndInitializeSid
GetTrusteeTypeA
AccessCheck
CryptDestroyHash
RegConnectRegistryA
RegSaveKeyA
CryptContextAddRef
AddAce
SetEntriesInAuditListA
DeregisterEventSource
RevertToSelf
ControlService
BackupEventLogA
CryptHashSessionKey
GetNumberOfEventLogRecords
RegDeleteValueA
RegFlushKey
GetServiceDisplayNameA
SetServiceStatus
PrivilegeCheck
EnumDependentServicesA
GetAclInformation
InitializeAcl
GetMultipleTrusteeA
CryptSetKeyParam
ObjectDeleteAuditAlarmA
OpenEventLogA
GetExplicitEntriesFromAclA
GetSecurityDescriptorControl
BuildSecurityDescriptorA
CryptGetKeyParam
FindFirstFreeAce

user32

GetSystemMenu
RemovePropA
OemToCharA
DrawTextExA
MonitorFromPoint
InvalidateRgn
DispatchMessageA
OpenDesktopA
DdeClientTransaction
GetKBCodePage
LoadAcceleratorsA
WinHelpA
InsertMenuItemA
DdeQueryStringA
ArrangeIconicWindows
GetClipboardFormatNameA
SetProcessWindowStation
PostQuitMessage
SetMenuDefaultItem
SetDebugErrorLevel
GetNextDlgTabItem
DrawFrame
GetKeyboardLayoutList
SetWindowRgn
LookupIconIdFromDirectory
FindWindowExA
GetWindowInfo
CreateAcceleratorTableA
DdeCreateDataHandle
ScrollDC
MessageBoxA
UnpackDDElParam
GetProcessDefaultLayout
CreateIconIndirect
LoadIconA
PackDDElParam
GetClassWord
BringWindowToTop
GetComboBoxInfo
SetKeyboardState
GetDlgCtrlID
InSendMessage
DdeNameService
GetWindowWord
IMPGetIMEA
GetTopWindow
RegisterWindowMessageA
GetClassInfoA
SetSysColors
GetDoubleClickTime
CheckMenuItem
CharToOemBuffA
GetIconInfo
SetWindowContextHelpId
LoadMenuIndirectA

Sections

.juvkn
Size: 638KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fmxmh
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rirg
Size: 19KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rkns
Size: 512B - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pkt
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mjcha
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zyhgj
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dsj
Size: 48KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mnw
Size: 132KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f9444d32a60de8c0c44cca87622658fe

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0bCertificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

advapi32

user32

Sections

.juvkn Size: 638KB - Virtual size: 1.3MB

.fmxmh Size: 6KB - Virtual size: 8KB

.rirg Size: 19KB - Virtual size: 27KB

.rkns Size: 512B - Virtual size: 21KB

.pkt Size: 6KB - Virtual size: 15KB

.mjcha Size: 512B - Virtual size: 56B

.zyhgj Size: 512B - Virtual size: 24B

.dsj Size: 48KB - Virtual size: 77KB

.mnw Size: 132KB - Virtual size: 1.7MB

.rsrc Size: 18KB - Virtual size: 20KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0b
Certificate

.juvkn
Size: 638KB - Virtual size: 1.3MB

.fmxmh
Size: 6KB - Virtual size: 8KB

.rirg
Size: 19KB - Virtual size: 27KB

.rkns
Size: 512B - Virtual size: 21KB

.pkt
Size: 6KB - Virtual size: 15KB

.mjcha
Size: 512B - Virtual size: 56B

.zyhgj
Size: 512B - Virtual size: 24B

.dsj
Size: 48KB - Virtual size: 77KB

.mnw
Size: 132KB - Virtual size: 1.7MB

.rsrc
Size: 18KB - Virtual size: 20KB