298c6ee6d46e21f9aa072ad2c800bb33_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

298c6ee6d46e21f9aa072ad2c800bb33_JaffaCakes118
Size

113KB
MD5

298c6ee6d46e21f9aa072ad2c800bb33
SHA1

ec107ac25dd57576b01b8a3be83a1c1250d6fb16
SHA256

54adef08f021ec453967e747e89be37e3ae5ce70d3834fb89854ff560ed4d6ad
SHA512

773b124b69ff081031cc409dbe7bd5cd98d38b5e95d1a9d3ece96e08633d98eed5463b6eb9696c3164286d7a768b87057015834c500096bc15d5ba81bb636f85
SSDEEP

1536:Ov6Rx3EQR3Mp5UXir1UBbaWzSVvplvCk+mhdIyOHrgZJcafAMkYEImwC0:OvU359Mp6w1aazRDKuO2bk9ImwC0

Score

1^/10

Malware Config

Signatures

Files

298c6ee6d46e21f9aa072ad2c800bb33_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b25e416328fdb24d6edb43049ad5fce7

Code Sign

11:69:07:ca:1a:f6:02:a4:48:92:59:23:44:00:86:23
Certificate

Issuer

CN=ANDDFCRF

Not Before

19/03/2019, 11:22

Not After

31/12/2039, 23:59

Subject

CN=ANDDFCRF

Extended Key Usages

ExtKeyUsageCodeSigning

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

cb:3b:91:4a:5b:1b:0d:77:5a:d1:be:4c:88:25:c5:df:83:c3:69:ab:87:13:e3:52:6a:62:3a:b4:29:07:2d:b9
Signer

Actual PE Digest

cb:3b:91:4a:5b:1b:0d:77:5a:d1:be:4c:88:25:c5:df:83:c3:69:ab:87:13:e3:52:6a:62:3a:b4:29:07:2d:b9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
MultiByteToWideChar
OutputDebugStringW
QueryPerformanceCounter
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
Sleep
LoadLibraryExW
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WideCharToMultiByte
WriteFile
lstrcatW
LeaveCriticalSection
LCMapStringW
IsValidCodePage
IsProcessorFeaturePresent
IsDebuggerPresent
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetStringTypeW
GetStdHandle
GetStartupInfoW
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleW
GetModuleHandleExW
GetModuleFileNameW
GetLastError
GetFileType
GetEnvironmentStringsW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetConsoleMode
GetConsoleCP
GetCommandLineW
GetCPInfo
GetACP
FreeEnvironmentStringsW
FormatMessageW
FlushFileBuffers
ExitProcess
EnterCriticalSection
EncodePointer
DeleteCriticalSection
DecodePointer
CreateFileW
VirtualAllocEx
TlsAlloc
GetModuleHandleA

user32

DrawTextA
DrawTextW
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndDialog
EndPaint
EnumWindows
EqualRect
ExcludeUpdateRgn
ExitWindowsEx
FillRect
FindWindowA
FrameRect
GetActiveWindow
GetAsyncKeyState
GetCapture
GetClassInfoA
GetClassLongA
GetClassNameA
GetClientRect
GetCursorPos
GetDC
GetDCEx
GetDlgCtrlID
GetDlgItem
GetDlgItemTextA
GetFocus
GetForegroundWindow
GetKeyState
GetLastActivePopup
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMessageA
GetMessagePos
GetMessageTime
GetNextDlgGroupItem
GetNextDlgTabItem
DrawStateA
GetPropA
GetSubMenu
GetSysColor
GetSysColorBrush
GetTopWindow
GetWindow
GetWindowDC
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
GrayStringA
HideCaret
InflateRect
IntersectRect
InvalidateRect
IsChild
IsClipboardFormatAvailable
IsDialogMessageA
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
LoadImageA
LoadImageW
LoadStringA
LockWindowUpdate
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxA
MessageBoxW
ModifyMenuA
ModifyMenuW
MoveWindow
MsgWaitForMultipleObjects
OffsetRect
PeekMessageA
PostMessageA
PostQuitMessage
PostThreadMessageA
PtInRect
RegisterClassA
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ScreenToClient
SendDlgItemMessageA
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetClipboardViewer
SetCursor
SetCursorPos
SetDlgItemTextA
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenuItemBitmaps
SetParent
SetPropA
SetRect
SetRectEmpty
SetTimer
SetWindowContextHelpId
SetWindowLongA
SetWindowPos
SetWindowTextA
SetWindowTextW
SetWindowsHookExA
ShowCaret
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
TabbedTextOutA
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassA
UpdateWindow
ValidateRect
WinHelpA
WindowFromPoint
wsprintfA
wsprintfW
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DispatchMessageA
DestroyMenu
DestroyIcon
DeleteMenu
DeferWindowPos
DefWindowProcW
DefWindowProcA
DefDlgProcA
CreateWindowExW
CreateWindowExA
CreatePopupMenu
CreateDialogParamW
CreateDialogParamA
CreateDialogIndirectParamA
CopyRect
CopyIcon
CopyAcceleratorTableA
ClientToScreen
CheckMenuRadioItem
CheckMenuItem
CharUpperA
CharNextA
ChangeClipboardChain
CallWindowProcA
CallNextHookEx
BeginPaint
BeginDeferWindowPos
AppendMenuW
AppendMenuA
AdjustWindowRectEx
EndMenu
GetClipboardViewer
GetDesktopWindow
PaintDesktop
GetSystemMetrics
GetThreadDesktop
DestroyWindow
GetMenu
DrawMenuBar
OpenIcon
GetParent

gdi32

SelectObject
Rectangle
MoveToEx
LineTo
GetStockObject
GetDeviceCaps
DeleteObject
CreateSolidBrush
CreatePen
CreateFontIndirectW
DeleteDC
CreatePatternBrush
GetDCPenColor

advapi32

SetThreadToken
SetServiceStatus
SetFileSecurityW
RegisterServiceCtrlHandlerW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegNotifyChangeKeyValue
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExA
RegOpenKeyA
AllocateAndInitializeSid
CheckTokenMembership
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptAcquireContextW
CryptCreateHash
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptReleaseContext
DuplicateToken
FreeSid
LookupAccountNameW
OpenThreadToken
RegCloseKey
StartServiceCtrlDispatcherW

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b25e416328fdb24d6edb43049ad5fce7

Code Sign

11:69:07:ca:1a:f6:02:a4:48:92:59:23:44:00:86:23Certificate

Extended Key Usages

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

cb:3b:91:4a:5b:1b:0d:77:5a:d1:be:4c:88:25:c5:df:83:c3:69:ab:87:13:e3:52:6a:62:3a:b4:29:07:2d:b9Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 98KB - Virtual size: 97KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 308B

.rsrc Size: 3KB - Virtual size: 3KB

11:69:07:ca:1a:f6:02:a4:48:92:59:23:44:00:86:23
Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

cb:3b:91:4a:5b:1b:0d:77:5a:d1:be:4c:88:25:c5:df:83:c3:69:ab:87:13:e3:52:6a:62:3a:b4:29:07:2d:b9
Signer

.text
Size: 98KB - Virtual size: 97KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 308B

.rsrc
Size: 3KB - Virtual size: 3KB