685c155283a9754e688095742337d90c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

685c155283a9754e688095742337d90c_JaffaCakes118
Size

44KB
MD5

685c155283a9754e688095742337d90c
SHA1

9c214f9cfb68c95666f3827785af1cb1878e8d6e
SHA256

b0359d854063871613da83bf6d74bac096db37dfc7c983deb036f19b829ad1f1
SHA512

7aa6c93b77194badc953456c0dd5c7f0c9a85b1eb0ea4d65586f164e58d8e663172747a14fc0946c2a7ece11fbb867310a867786c1be853a7c9f6ebe602b79da
SSDEEP

768:WgC3bhhCRLN2iYL8WXO0/tkrLFq5TrLKY/:UbnwNar7tApq53WY/

Score

1^/10

Malware Config

Signatures

Files

685c155283a9754e688095742337d90c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28b8c00257f00fa4e8ef90f182042436

Code Sign

55:6c:eb:14:82:d4:db:a8:4b:03:8b:05:87:8e:f8:f9
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA

Not Before

02/06/2011, 00:58

Not After

31/12/2039, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA

44:a3:17:85:01:c8:58:6a:b7:7e:90:2b:66:e9:09:e3
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA

Not Before

07/06/2011, 15:01

Not After

31/12/2039, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

98:99:de:80:89:87:0f:03:22:25:fe:5b:ec:eb:93:2c:91:96:24:ab
Signer

Actual PE Digest

98:99:de:80:89:87:0f:03:22:25:fe:5b:ec:eb:93:2c:91:96:24:ab

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
GetProcAddress
LoadLibraryA
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

28b8c00257f00fa4e8ef90f182042436

Code Sign

55:6c:eb:14:82:d4:db:a8:4b:03:8b:05:87:8e:f8:f9Certificate

44:a3:17:85:01:c8:58:6a:b7:7e:90:2b:66:e9:09:e3Certificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

98:99:de:80:89:87:0f:03:22:25:fe:5b:ec:eb:93:2c:91:96:24:abSigner

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 28KB - Virtual size: 26KB

55:6c:eb:14:82:d4:db:a8:4b:03:8b:05:87:8e:f8:f9
Certificate

44:a3:17:85:01:c8:58:6a:b7:7e:90:2b:66:e9:09:e3
Certificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

98:99:de:80:89:87:0f:03:22:25:fe:5b:ec:eb:93:2c:91:96:24:ab
Signer

.text
Size: 28KB - Virtual size: 26KB