5a063d130882b13905b50bada8f613dc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5a063d130882b13905b50bada8f613dc_JaffaCakes118
Size

1.3MB
MD5

5a063d130882b13905b50bada8f613dc
SHA1

6b7f0e6ed5d967e676b43d7ed645046ddb3dc04c
SHA256

f5acd9e865bb77d578c57f82e7875dfd6cae0f2c5a3972a373ecf48d9ca0b5ca
SHA512

94b9ce3c27331c824006c32b0b45934c3a0757ad75b5c0a82510856331728003932b2facbbb60c6bb0d0084adce732187528f60f924454a965533333585ceefa
SSDEEP

24576:BEjXe5ZMjASDXvNyymtU8vwExDqTALf8j7l2wC7iKLSh7up+V15exdrJ5:qjX8wJDfjovwEcEz+h7O+f5cJ5

Score

1^/10

Malware Config

Signatures

Files

5a063d130882b13905b50bada8f613dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

071f4f09143293a74bae81a242029ffe

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

29/01/1996, 00:00

Not After

01/08/2028, 23:59

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

57:8c:b2:f9:36:e4:62:3b:20:cd:2b:cf:75:7f:c6:f4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

11/12/2007, 00:00

Not After

10/12/2008, 23:59

Subject

CN=Autotime Solutions Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Autotime Solutions Ltd.,ST=West Midlands,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

11:37:50:7d:a3:62:e7:3c:bd:5c:28:8e:d5:be:a9:7b:64:d5:ee:b6
Signer

Actual PE Digest

11:37:50:7d:a3:62:e7:3c:bd:5c:28:8e:d5:be:a9:7b:64:d5:ee:b6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
WaitForSingleObject
ReleaseSemaphore
LocalFree
CloseHandle
DeviceIoControl
CreateFileA
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
TlsSetValue
TlsGetValue
TlsAlloc
SystemTimeToFileTime
GetSystemTime
FileTimeToSystemTime
WriteFile
SetErrorMode
GetProcAddress
GetCurrentProcess
ReadFile
FindFirstFileA
GetModuleFileNameA
FindClose
FindNextFileA
GetCurrentProcessId
GetEnvironmentVariableA
LoadLibraryA
FreeLibrary
GetModuleHandleA
GetFileSize
GetLocalTime
LocalReAlloc
GetLastError
SearchPathA
Sleep
OpenSemaphoreA
CreateSemaphoreA
GetModuleHandleA
GetProcAddress

setupapi

SetupDiEnumDeviceInfo

user32

MessageBoxA

msvbvm60

__vbaVarTstGt

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.protect
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

071f4f09143293a74bae81a242029ffe

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bfCertificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

57:8c:b2:f9:36:e4:62:3b:20:cd:2b:cf:75:7f:c6:f4Certificate

Extended Key Usages

Key Usages

11:37:50:7d:a3:62:e7:3c:bd:5c:28:8e:d5:be:a9:7b:64:d5:ee:b6Signer

Headers

File Characteristics

Imports

kernel32

setupapi

user32

msvbvm60

Sections

.text Size: 96KB - Virtual size: 94KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 3KB

.protect Size: 1.2MB - Virtual size: 1.2MB

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

57:8c:b2:f9:36:e4:62:3b:20:cd:2b:cf:75:7f:c6:f4
Certificate

11:37:50:7d:a3:62:e7:3c:bd:5c:28:8e:d5:be:a9:7b:64:d5:ee:b6
Signer

.text
Size: 96KB - Virtual size: 94KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 3KB

.protect
Size: 1.2MB - Virtual size: 1.2MB