3be45ff52afa8ccea583005911d92354_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3be45ff52afa8ccea583005911d92354_JaffaCakes118
Size

876KB
MD5

3be45ff52afa8ccea583005911d92354
SHA1

799d9c6a8e0746df510d0b7e8e5be630f59fe416
SHA256

5cd7b24795092d14bd552a9f12fc08461483845cb3a82d8e445d1d10e036adb5
SHA512

4a02ffbb2daab37157e247c2a4ed801c164675086c98e8e9767935d766fcea56b1a7361564e289ca21f7e70fe308a27b20b6cf65178c515ca2d9e98a91bb53af
SSDEEP

24576:svKIuOJRvreXZG90sbn4OlhERXUIsZLVxsHu:svFuSl+G90sb4OlhE9JsxsO

Score

1^/10

Malware Config

Signatures

Files

3be45ff52afa8ccea583005911d92354_JaffaCakes118
.exe windows:4 windows x86 arch:x86

50f8d7a15a56836468d80b27b2fffee9

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

01/02/2008, 00:00

Not After

31/01/2009, 23:59

Subject

CN=InstallProvider Inc.,O=InstallProvider Inc.,POSTALCODE=DM,STREET=15 Cornwall Street,L=Roseau,ST=Dominica,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetProcessDefaultLayout
CharNextExA
UnhookWinEvent
SetWindowRgn
LookupIconIdFromDirectory
TranslateAccelerator
WinHelpA
EnableScrollBar
DdeQueryStringA
ScrollDC
OpenDesktopA
SetProcessWindowStation
SetScrollInfo
ShowWindowAsync
GetClipboardFormatNameA
DdeEnableCallback
SwitchToThisWindow
DrawFrame
DispatchMessageA
CheckMenuItem
CreateIconIndirect
FreeDDElParam
SetDoubleClickTime
GetWindowWord
IsCharLowerA
GetLastActivePopup
GetClassInfoA
IsDialogMessage
DdeClientTransaction
MsgWaitForMultipleObjects
SendIMEMessageExA
DestroyAcceleratorTable
OemToCharA
CreateWindowExA
RegisterWindowMessageA
AlignRects
IMPGetIMEA
GetShellWindow
UnpackDDElParam
GetKeyboardLayoutList
BringWindowToTop
DrawCaption
GetMenuCheckMarkDimensions
EnumDisplayMonitors
IsMenu
IsWindowUnicode
GetClassWord
DdeNameService
RegisterDeviceNotificationA
GetSystemMenu
UpdateWindow
EnumPropsExA

advapi32

CryptDestroyHash
SetEntriesInAuditListA
BackupEventLogA
GetSecurityDescriptorOwner
GetServiceDisplayNameA
CryptSetKeyParam
CryptGenKey
DeregisterEventSource
ChangeServiceConfigA
RegConnectRegistryA
SetServiceStatus
BuildSecurityDescriptorA
FindFirstFreeAce
RegUnLoadKeyA
AddAce
CopySid
CryptContextAddRef
EnumDependentServicesA
CryptSignHashA
RegFlushKey
GetSidSubAuthority
GetTrusteeTypeA
GetExplicitEntriesFromAclA
GetSecurityDescriptorControl
IsTextUnicode
ControlService
RegDeleteValueA
CryptGetKeyParam
CryptHashSessionKey
RegQueryValueA
GetNumberOfEventLogRecords
RegOpenKeyA
InitializeAcl
RegSaveKeyA
PrivilegeCheck
RevertToSelf
GetAclInformation
CryptEncrypt

kernel32

Thread32Next

Sections

.ojuhq
Size: 638KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kxkb
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.litap
Size: 19KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qbev
Size: 512B - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itqv
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mdyti
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tqz
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xspw
Size: 48KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ebkru
Size: 132KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50f8d7a15a56836468d80b27b2fffee9

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0bCertificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

user32

advapi32

kernel32

Sections

.ojuhq Size: 638KB - Virtual size: 1.3MB

.kxkb Size: 6KB - Virtual size: 8KB

.litap Size: 19KB - Virtual size: 27KB

.qbev Size: 512B - Virtual size: 21KB

.itqv Size: 6KB - Virtual size: 15KB

.mdyti Size: 512B - Virtual size: 56B

.tqz Size: 512B - Virtual size: 24B

.xspw Size: 48KB - Virtual size: 77KB

.ebkru Size: 132KB - Virtual size: 1.7MB

.rsrc Size: 18KB - Virtual size: 20KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0b
Certificate

.ojuhq
Size: 638KB - Virtual size: 1.3MB

.kxkb
Size: 6KB - Virtual size: 8KB

.litap
Size: 19KB - Virtual size: 27KB

.qbev
Size: 512B - Virtual size: 21KB

.itqv
Size: 6KB - Virtual size: 15KB

.mdyti
Size: 512B - Virtual size: 56B

.tqz
Size: 512B - Virtual size: 24B

.xspw
Size: 48KB - Virtual size: 77KB

.ebkru
Size: 132KB - Virtual size: 1.7MB

.rsrc
Size: 18KB - Virtual size: 20KB