4377c9c00204d953fc6f2a4a5bccf946_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

4377c9c00204d953fc6f2a4a5bccf946_JaffaCakes118
Size

27KB
MD5

4377c9c00204d953fc6f2a4a5bccf946
SHA1

7f42499c2fc7db51fd96a73715e53f84a3c185cc
SHA256

4c0a3f4e972b77cc1d30aee8c3d9efda87d6e38526d4f32817cb9144a229c044
SHA512

55084cd3d35fa87e360b3557d612cae56a4ae2a65ed07c6034d9d4c0c1f83be0099ff79bd263b13705ce00b3b725c3f4f483a65310e9531011e2b7942285047c
SSDEEP

768:OKrjmoOFyUxrlqXqfXkbXiXVaZ1ACbNL9BW:OKWJfxrlq6/kbXiX87AC5J8

Score

1^/10

Malware Config

Signatures

Files

4377c9c00204d953fc6f2a4a5bccf946_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68e743663a4ddf5fa08040f6fa1dbd52

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c1:01:a7:84:ac:30:f1:8d:9d:03:7f:60:d0:91:13:f1
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

20/11/2008, 00:00

Not After

20/11/2010, 23:59

Subject

CN=Exact Solution\, Inc,O=Exact Solution\, Inc,POSTALCODE=34203,STREET=1901 60th Place E. Suite L4257,L=Bradenton,ST=Florida,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9f:a0:7f:81:7a:ce:56:99:b4:15:28:88:46:88:b6:be:9c:93:ad:64
Signer

Actual PE Digest

9f:a0:7f:81:7a:ce:56:99:b4:15:28:88:46:88:b6:be:9c:93:ad:64

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetStartupInfoA
CompareStringA
FindNextFileW
GetModuleHandleA
SetFilePointer
GetACP
FindFirstFileA
GetOEMCP
SetStdHandle
GetProcAddress
ExitProcess
HeapAlloc
GetConsoleCP
ResumeThread
QueryPerformanceCounter
SetConsoleCP
InterlockedDecrement
SetUnhandledExceptionFilter

user32

SystemParametersInfoA
SetFocus
WindowFromPoint
LoadStringA
SetScrollInfo

advapi32

RegOpenKeyExW
ReportEventW
OpenSCManagerW

gdi32

CombineRgn

msvcrt

__p__fmode
??0exception@@QAE@XZ

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

68e743663a4ddf5fa08040f6fa1dbd52

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

c1:01:a7:84:ac:30:f1:8d:9d:03:7f:60:d0:91:13:f1Certificate

Extended Key Usages

Key Usages

9f:a0:7f:81:7a:ce:56:99:b4:15:28:88:46:88:b6:be:9c:93:ad:64Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

msvcrt

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 1024B - Virtual size: 984B

.data Size: 15KB - Virtual size: 21KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

c1:01:a7:84:ac:30:f1:8d:9d:03:7f:60:d0:91:13:f1
Certificate

9f:a0:7f:81:7a:ce:56:99:b4:15:28:88:46:88:b6:be:9c:93:ad:64
Signer

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 1024B - Virtual size: 984B

.data
Size: 15KB - Virtual size: 21KB