6152021b621b0c15c29834790d6422a7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6152021b621b0c15c29834790d6422a7_JaffaCakes118
Size

876KB
MD5

6152021b621b0c15c29834790d6422a7
SHA1

22b4a25cc04afba0c78532382879c4a1e9077bae
SHA256

2d099cecebd19d158157379efbc11047744650d0e710ad146ba527f13a6707a9
SHA512

bf2e7906bad7c3e1547305afaf522fc51f9a1eb24ded754466f95cd2f3dc3241ffd5805cae943a13d73faee67e5f1bf5831ac22ff8af70dae5d6b0bc47adcb9e
SSDEEP

24576:8E236ZaHpXa2CPrlatwF/l6lkVcw3EfkP1Zmd:8EJ2pXRCPrOQt6lk+w3E4P

Score

1^/10

Malware Config

Signatures

Files

6152021b621b0c15c29834790d6422a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

181572cc4963593bfff4111c010d133b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

01/02/2008, 00:00

Not After

31/01/2009, 23:59

Subject

CN=InstallProvider Inc.,O=InstallProvider Inc.,POSTALCODE=DM,STREET=15 Cornwall Street,L=Roseau,ST=Dominica,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetSecurityDescriptorControl
BuildSecurityDescriptorA
CryptHashSessionKey
GetSidSubAuthority
CryptGenKey
CryptGetKeyParam
ObjectDeleteAuditAlarmA
GetTrusteeTypeA
GetExplicitEntriesFromAclA
RevertToSelf
ControlService
OpenEventLogA
GetServiceDisplayNameA
RegQueryValueA
RegSaveKeyA
AllocateAndInitializeSid
AccessCheck
CryptEncrypt
EnumDependentServicesA
RegDeleteValueA
RegUnLoadKeyA
QueryServiceObjectSecurity
DeregisterEventSource
SetEntriesInAuditListA
CopySid
CryptContextAddRef
RegOpenKeyA
CryptSetKeyParam
RegFlushKey
IsTextUnicode
SetServiceStatus
GetSecurityDescriptorOwner
AddAce
GetNumberOfEventLogRecords
GetMultipleTrusteeA
GetAclInformation
InitializeAcl
FindFirstFreeAce

user32

PackDDElParam
GetMenuItemCount
CreateIconIndirect
IsDialogMessage
GetNextDlgTabItem
GetProcessDefaultLayout
CharNextExA
GetShellWindow
EnableScrollBar
RemovePropA
ArrangeIconicWindows
SetMessageExtraInfo
DdeNameService
SetCaretBlinkTime
GetIconInfo
ToUnicodeEx
GetMenuState
BringWindowToTop
wvsprintfA
ChildWindowFromPointEx
OemToCharA
CopyIcon
UnpackDDElParam
GetClassWord
UnhookWinEvent
SetWindowRgn
UpdateWindow
SetMenuDefaultItem
SendIMEMessageExA
GetAsyncKeyState
ExcludeUpdateRgn
DefMDIChildProcA
GetTopWindow
DdeUnaccessData
RegisterDeviceNotificationA
GetSystemMenu
GetScrollBarInfo
DdeClientTransaction
CharToOemBuffA
GetDC
ShowCursor
LoadAcceleratorsA
InSendMessage
GetWindowWord
SetClipboardData
SetWindowContextHelpId
SetDoubleClickTime
DdeQueryStringA
GetUserObjectSecurity
GetComboBoxInfo
IsCharLowerA
FreeDDElParam

Sections

.zot
Size: 638KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xehuv
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lcpkp
Size: 19KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.enqli
Size: 512B - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xit
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ufe
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bgf
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ibods
Size: 48KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qhwju
Size: 132KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

181572cc4963593bfff4111c010d133b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0bCertificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

advapi32

user32

Sections

.zot Size: 638KB - Virtual size: 1.3MB

.xehuv Size: 6KB - Virtual size: 8KB

.lcpkp Size: 19KB - Virtual size: 27KB

.enqli Size: 512B - Virtual size: 21KB

.xit Size: 6KB - Virtual size: 15KB

.ufe Size: 512B - Virtual size: 56B

.bgf Size: 512B - Virtual size: 24B

.ibods Size: 48KB - Virtual size: 77KB

.qhwju Size: 132KB - Virtual size: 1.7MB

.rsrc Size: 18KB - Virtual size: 20KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0b
Certificate

.zot
Size: 638KB - Virtual size: 1.3MB

.xehuv
Size: 6KB - Virtual size: 8KB

.lcpkp
Size: 19KB - Virtual size: 27KB

.enqli
Size: 512B - Virtual size: 21KB

.xit
Size: 6KB - Virtual size: 15KB

.ufe
Size: 512B - Virtual size: 56B

.bgf
Size: 512B - Virtual size: 24B

.ibods
Size: 48KB - Virtual size: 77KB

.qhwju
Size: 132KB - Virtual size: 1.7MB

.rsrc
Size: 18KB - Virtual size: 20KB