64d1571e9454b10612f22d43b25fe880_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

64d1571e9454b10612f22d43b25fe880_JaffaCakes118
Size

876KB
MD5

64d1571e9454b10612f22d43b25fe880
SHA1

cf8661f30d17abe6330b8cf1a2d3f4b6f532ea26
SHA256

8e67cb4bbcba6dab2b749c9bc37b22e3129e6c0f7e3b32f28db5b94a54008f21
SHA512

51c90cdef2f07c181917e0221cb60501dd0c7aac28436075162a7bf0afaf4e5668bca96d3a2744970078c59d34d11554804f7091450e4706fc55ed8c88f988ba
SSDEEP

24576:Hd/wDYl72KdUesrOS/uftO/LTcrCNICj9qI3BYUaaj:94Dw/dUesUQL2CjkI

Score

1^/10

Malware Config

Signatures

Files

64d1571e9454b10612f22d43b25fe880_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c3575a4c79b987078592ed806f567a78

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09-07-1999 18:31

Not After

09-07-2019 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

01-02-2008 00:00

Not After

31-01-2009 23:59

Subject

CN=InstallProvider Inc.,O=InstallProvider Inc.,POSTALCODE=DM,STREET=15 Cornwall Street,L=Roseau,ST=Dominica,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProfileStringA
EraseTape
WriteFile
LocalFileTimeToFileTime
GetDefaultCommConfigA
CreateProcessA
GetCommModemStatus
GlobalGetAtomNameA
WaitForMultipleObjects
HeapCompact
SetLocalTime
HeapUnlock
CommConfigDialogA
GetConsoleTitleA
PeekNamedPipe
GetNamedPipeHandleStateA
CreateFileMappingA
GlobalUnWire
ReadConsoleOutputA
SwitchToFiber
FlushInstructionCache
SleepEx
GetExitCodeThread
GetConsoleCursorInfo
TransactNamedPipe
_lread
SetConsoleOutputCP
CreateNamedPipeA
GetLogicalDriveStringsA
TerminateThread
SetTapeParameters
CloseHandle
OpenFileMappingA
ContinueDebugEvent
SetSystemTime
BackupSeek
GetTickCount
HeapWalk
LocalUnlock
SetCommMask
GetUserDefaultLangID
CallNamedPipeA
GetConsoleOutputCP
ReadFileEx
IsBadHugeReadPtr
EnumResourceTypesA
LocalLock
SystemTimeToTzSpecificLocalTime
MoveFileA
SetCommTimeouts
FillConsoleOutputAttribute
UTRegister
SetMailslotInfo
GetSystemPowerStatus
CreateFiber
WaitNamedPipeA
UnhandledExceptionFilter
SetVolumeLabelA
GetShortPathNameA
VirtualLock

shlwapi

StrIsIntlEqualA
PathSearchAndQualifyA
PathFileExistsA
StrFormatByteSize64A
SHIsLowMemoryMachine
StrToIntExA
PathAppendA
HashData
PathMakePrettyA
SHAutoComplete
UrlIsOpaqueA
PathIsUNCA
StrChrIA
PathIsFileSpecA
PathIsRelativeA
AssocQueryStringA
UrlCombineA
PathGetDriveNumberA
PathQuoteSpacesA
SHDeleteValueA
StrCSpnA
SHCreateStreamWrapper
ColorHLSToRGB
PathFindOnPathA
StrSpnA
StrRChrIA
PathCommonPrefixA
SHRegWriteUSValueA
SHRegOpenUSKeyA
SHRegEnumUSKeyA

user32

GetDC

Sections

.zcng
Size: 638KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.its
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.twfuf
Size: 19KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ava
Size: 512B - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmr
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gbod
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.onkz
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qzeni
Size: 48KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zsva
Size: 132KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3575a4c79b987078592ed806f567a78

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0bCertificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

shlwapi

user32

Sections

.zcng Size: 638KB - Virtual size: 1.3MB

.its Size: 6KB - Virtual size: 8KB

.twfuf Size: 19KB - Virtual size: 27KB

.ava Size: 512B - Virtual size: 21KB

.vmr Size: 6KB - Virtual size: 15KB

.gbod Size: 512B - Virtual size: 56B

.onkz Size: 512B - Virtual size: 24B

.qzeni Size: 48KB - Virtual size: 77KB

.zsva Size: 132KB - Virtual size: 1.7MB

.rsrc Size: 18KB - Virtual size: 20KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0b
Certificate

.zcng
Size: 638KB - Virtual size: 1.3MB

.its
Size: 6KB - Virtual size: 8KB

.twfuf
Size: 19KB - Virtual size: 27KB

.ava
Size: 512B - Virtual size: 21KB

.vmr
Size: 6KB - Virtual size: 15KB

.gbod
Size: 512B - Virtual size: 56B

.onkz
Size: 512B - Virtual size: 24B

.qzeni
Size: 48KB - Virtual size: 77KB

.zsva
Size: 132KB - Virtual size: 1.7MB

.rsrc
Size: 18KB - Virtual size: 20KB