38a60eb3bd5446ad4e8db6605dfc4eb1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

38a60eb3bd5446ad4e8db6605dfc4eb1_JaffaCakes118
Size

1.4MB
MD5

38a60eb3bd5446ad4e8db6605dfc4eb1
SHA1

f3d12ccc173f9b432aafc2dbecf2453ebaf8453e
SHA256

c3cc3848e152a5b4650db050d377ce19c9d15de520d66cdb9873edba0ad3b30c
SHA512

5341bc3042059bb022921ae3d4f137abd7d35eee0d40b342531933d0eba76cac74efe27b6d6e049a6ad455c5ed3a57c8bb67c6446dfec99e21510ebbba057138
SSDEEP

24576:dOR96opoWc2pMYgrTzSL+EwLKVgkJO/4c/rGmw7ysMY0VqYWGVWb9SS/:MDtpoMGX/zSL+ox0/taZ7ysMNno/

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
static1/unpack001/USB Secure v1.5.2/usb-secure-sw.exe	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/USB Secure v1.5.2/Patch-MPT/usb.secure.1.5.2-MPT.exe

Files

38a60eb3bd5446ad4e8db6605dfc4eb1_JaffaCakes118
.rar
USB Secure v1.5.2/...Y AQUIII!!!!!.url
.url
USB Secure v1.5.2/ENTRA AQUI YA!!!!!.url
.url
USB Secure v1.5.2/Instrucciones.txt
USB Secure v1.5.2/Patch-MPT/MPT.nfo
USB Secure v1.5.2/Patch-MPT/usb.secure.1.5.2-MPT.exe
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 130KB - Virtual size: 464KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
USB Secure v1.5.2/VISITA JMPSMICKY.url
.url
USB Secure v1.5.2/Y AQUI TAMBIEN!!!!.url
.url
USB Secure v1.5.2/usb-secure-sw.exe
.exe windows:4 windows x86 arch:x86

Code Sign

04:00:00:00:00:01:1e:44:a5:e2:4e
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

28-01-1999 13:00

Not After

27-01-2017 12:00

Subject

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:23:9e:0f:ac:b3
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

28-01-1999 13:00

Not After

27-01-2017 12:00

Subject

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:20:19:c1:90:66
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18-03-2009 11:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:00:00:00:00:01:25:b0:b4:cc:01
Certificate

Issuer

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Not Before

21-12-2009 09:32

Not After

22-12-2020 09:32

Subject

CN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:00:00:00:00:01:1f:3b:fc:d8:8e
Certificate

Issuer

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Not Before

03-02-2009 10:53

Not After

03-02-2012 10:53

Subject

CN=NewSoftwares.net Inc. SDN. BHD.,O=NewSoftwares.net Inc. SDN. BHD.,C=MY,1.2.840.113549.1.9.1=#0c1a707265736964656e74406e6577736f667477617265732e6e6574

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:1e:44:a5:ec:be
Certificate

Issuer

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Not Before

22-01-2004 10:00

Not After

27-01-2017 11:00

Subject

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:23:9e:0f:af:24
Certificate

Issuer

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Not Before

22-01-2004 10:00

Not After

27-01-2017 10:00

Subject

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

46:58:f6:1a:5f:32:d2:12:f1:f5:18:d2:09:dd:93:41:35:88:3d:00
Signer

Actual PE Digest

46:58:f6:1a:5f:32:d2:12:f1:f5:18:d2:09:dd:93:41:35:88:3d:00

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 134KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 130KB - Virtual size: 464KB

.rsrc Size: 16KB - Virtual size: 20KB

Code Sign

04:00:00:00:00:01:1e:44:a5:e2:4eCertificate

Key Usages

04:00:00:00:00:01:23:9e:0f:ac:b3Certificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:20:19:c1:90:66Certificate

Key Usages

01:00:00:00:00:01:25:b0:b4:cc:01Certificate

Extended Key Usages

Key Usages

01:00:00:00:00:01:1f:3b:fc:d8:8eCertificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:1e:44:a5:ec:beCertificate

Key Usages

04:00:00:00:00:01:23:9e:0f:af:24Certificate

Extended Key Usages

Key Usages

46:58:f6:1a:5f:32:d2:12:f1:f5:18:d2:09:dd:93:41:35:88:3d:00Signer

Headers

File Characteristics

Sections

.text Size: 134KB - Virtual size: 284KB

.rdata Size: 21KB - Virtual size: 76KB

.data Size: 3KB - Virtual size: 28KB

.rsrc Size: 1.1MB - Virtual size: 5.6MB

.aspack Size: 39KB - Virtual size: 40KB

.adata Size: - Virtual size: 4KB

.text
Size: 130KB - Virtual size: 464KB

.rsrc
Size: 16KB - Virtual size: 20KB

04:00:00:00:00:01:1e:44:a5:e2:4e
Certificate

04:00:00:00:00:01:23:9e:0f:ac:b3
Certificate

04:00:00:00:00:01:20:19:c1:90:66
Certificate

01:00:00:00:00:01:25:b0:b4:cc:01
Certificate

01:00:00:00:00:01:1f:3b:fc:d8:8e
Certificate

04:00:00:00:00:01:1e:44:a5:ec:be
Certificate

04:00:00:00:00:01:23:9e:0f:af:24
Certificate

46:58:f6:1a:5f:32:d2:12:f1:f5:18:d2:09:dd:93:41:35:88:3d:00
Signer

.text
Size: 134KB - Virtual size: 284KB

.rdata
Size: 21KB - Virtual size: 76KB

.data
Size: 3KB - Virtual size: 28KB

.rsrc
Size: 1.1MB - Virtual size: 5.6MB

.aspack
Size: 39KB - Virtual size: 40KB

.adata
Size: - Virtual size: 4KB