5ee39464c31401bc9185438cbf84fb27_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5ee39464c31401bc9185438cbf84fb27_JaffaCakes118
Size

589KB
MD5

5ee39464c31401bc9185438cbf84fb27
SHA1

f8b71d1bd02d8ec3dad752422444eb25f0b2ba80
SHA256

fac190fe048ff54bb054f2d275313a27496588d39924d9aa8fd15fafb3463c38
SHA512

22d13962c5823295fd2d11ebf5bb0f17bacfcea3e556f66edc7860a6ce30aaee4581e8be66aabe9a1f93826963e61e4b08f889104891085136fcd9a22cb54153
SSDEEP

12288:ZpYBRoYbI7XHgZQKhJgeCm+3xJrp3pkWJtbZU8JFtrymB:ZCoYsLHgZpJEDBFp3SKtb/JFwE

Score

1^/10

Malware Config

Signatures

Files

5ee39464c31401bc9185438cbf84fb27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fcd376aae4f5f2a6cb926124bd0387af

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:53

Not After

16/09/2011, 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:55

Not After

16/09/2011, 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

29:58:91:96:a5:e2:38:c7:06:e0:96:d9:24:c8:86:6c:40:f5:4c:48
Signer

Actual PE Digest

29:58:91:96:a5:e2:38:c7:06:e0:96:d9:24:c8:86:6c:40:f5:4c:48

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

selfcert.pdb

Imports

kernel32

LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
GetModuleFileNameW
LoadLibraryW
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetUserDefaultLangID
GetSystemDefaultLCID
GetACP
FileTimeToSystemTime
GetLastError
lstrlenW
RaiseException
InterlockedExchange
FreeLibrary
LocalAlloc
LocalFree
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
VirtualProtect
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetUserDefaultLCID
CompareStringW
IsValidLocale
MulDiv
OutputDebugStringA
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
GetVersion
GetFileAttributesW
GetModuleHandleW
VirtualAlloc
SetLastError
LeaveCriticalSection
EnterCriticalSection
TlsGetValue
VirtualFree
TlsSetValue
DeleteCriticalSection
TlsFree
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetModuleHandleA
GetLocaleInfoA

advapi32

RegOpenKeyExW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegQueryValueExW
RegCloseKey
CryptAcquireContextW
CryptReleaseContext
CryptGenKey
CryptDestroyKey

gdi32

TextOutW
CreateFontIndirectA
GetObjectA
GetTextMetricsA
SelectObject
GetTextExtentPoint32W
CreatePen
SetBkColor
SetTextColor
SetTextAlign
DeleteObject
LineTo
MoveToEx
GetDeviceCaps

user32

SendDlgItemMessageW
GetDlgItem
LoadCursorW
RegisterClassExW
LoadIconW
GetWindowTextW
SetWindowPos
ReleaseDC
SetFocus
GetDC
GetClientRect
GetSysColor
GetFocus
DrawFocusRect
EndPaint
InvalidateRect
DefWindowProcW
GetParent
SendMessageW
LoadStringW
GetClassNameA
SendMessageA
BeginPaint
GetWindowLongA
GetWindowLongW
DrawTextA
DrawTextW
SetRectEmpty
MapWindowPoints
GetWindowRect
MoveWindow
IsWindowVisible
GetWindow
IsWindow
CreateWindowExA
CreateDialogIndirectParamA
DestroyWindow
MapDialogRect
SystemParametersInfoA
LoadBitmapA
GetSystemMetrics
SetWindowTextW
GetDlgCtrlID
EndDialog
DialogBoxParamW
MessageBoxW
IsWindowUnicode

ole32

CoCreateInstance
CoInitialize
CoCreateGuid
CoUninitialize

msvcrt

_controlfp
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_amsg_exit
_wcmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
__CxxFrameHandler
swprintf
memmove
_except_handler3
iswspace
_vsnwprintf
_CxxThrowException
??1type_info@@UAE@XZ

Sections

.text
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 195KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�N
Size: 242KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fcd376aae4f5f2a6cb926124bd0387af

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

61:47:52:ba:00:00:00:00:00:04Certificate

Extended Key Usages

Key Usages

61:49:7c:ed:00:00:00:00:00:05Certificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate

Extended Key Usages

Key Usages

61:46:9e:cb:00:04:00:00:00:65Certificate

Extended Key Usages

Key Usages

29:58:91:96:a5:e2:38:c7:06:e0:96:d9:24:c8:86:6c:40:f5:4c:48Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

gdi32

user32

ole32

msvcrt

Sections

.text Size: 138KB - Virtual size: 138KB

.data Size: 195KB - Virtual size: 296KB

.cdata Size: 512B - Virtual size: 4B

.rsrc Size: 3KB - Virtual size: 2KB

�N Size: 242KB - Virtual size: 244KB

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

61:47:52:ba:00:00:00:00:00:04
Certificate

61:49:7c:ed:00:00:00:00:00:05
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

61:46:9e:cb:00:04:00:00:00:65
Certificate

29:58:91:96:a5:e2:38:c7:06:e0:96:d9:24:c8:86:6c:40:f5:4c:48
Signer

.text
Size: 138KB - Virtual size: 138KB

.data
Size: 195KB - Virtual size: 296KB

.cdata
Size: 512B - Virtual size: 4B

.rsrc
Size: 3KB - Virtual size: 2KB

�N
Size: 242KB - Virtual size: 244KB