59a4ab68be029962ea63c73a36e9900e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

59a4ab68be029962ea63c73a36e9900e_JaffaCakes118
Size

40KB
MD5

59a4ab68be029962ea63c73a36e9900e
SHA1

d5710e8fd3ab08260ff81dcc0aa7ca48552f7fd8
SHA256

ec943bc4dc9a649c7a33909afbc7aaa77072a340dc131285836dbe1dfa36c9f5
SHA512

788ee14e6d08272efa95dc648a8ffc1705b9e5ef0bd34985ae924a834887ddc0e1ffab324b940fb19af742be7fabbc538e490cb901ad47847baa04fd634084ef
SSDEEP

768:ixNU8740bjefInvykscMdjJ1BWtkQQLO468YYaoj1Q931zt0sO:ixNUu40nefInFuN1UtkR6829Fx7O

Score

1^/10

Malware Config

Signatures

Files

59a4ab68be029962ea63c73a36e9900e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a0ed9436f440ae783376dacce8d4fa8e

Code Sign

c0:5c:4e:a1:18:0b:c4:46:ae:0f:5f:88:b6:b5:87:82
Certificate

Issuer

CN=Adobel,OU=CSl,O=Adobel,L=Alaska,ST=VA,C=US,1.2.840.113549.1.9.1=#0c1862696c6c2e6761746573406d6963726f736f66742e636f6d

Not Before

27/01/2009, 00:00

Not After

26/01/2010, 23:59

Subject

CN=Adobel,OU=CSl,O=Adobel,L=Alaska,ST=VA,C=US,1.2.840.113549.1.9.1=#0c1862696c6c2e6761746573406d6963726f736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

17/05/2005, 00:00

Not After

16/05/2010, 23:59

Subject

CN=Comodo Time Stamping Signer,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
AdjustTokenPrivileges

kernel32

CloseHandle
CopyFileA
CreateDirectoryA
CreateFileA
CreateMutexA
CreateThread
DeleteFileA
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
GetCurrentDirectoryA
GetCurrentProcess
GetEnvironmentVariableA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
LoadLibraryA
LocalAlloc
LocalFree
MoveFileA
MoveFileExA
OpenMutexA
ReadFile
SetCurrentDirectoryA
SetFilePointer
Sleep
TerminateProcess
WinExec
WriteFile
lstrcatA
lstrcmpA
lstrlenA

shell32

ShellExecuteA

user32

ExitWindowsEx
GetDlgItem
GetWindowTextA
PostMessageA
EnumWindows

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a0ed9436f440ae783376dacce8d4fa8e

Code Sign

c0:5c:4e:a1:18:0b:c4:46:ae:0f:5f:88:b6:b5:87:82Certificate

Extended Key Usages

Key Usages

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89Certificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

advapi32

kernel32

shell32

user32

Sections

.text Size: 30KB - Virtual size: 29KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 3KB

c0:5c:4e:a1:18:0b:c4:46:ae:0f:5f:88:b6:b5:87:82
Certificate

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

.text
Size: 30KB - Virtual size: 29KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 3KB