8727f7651c4aa2a21fa7c4f702d82a74_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8727f7651c4aa2a21fa7c4f702d82a74_JaffaCakes118
Size

60KB
MD5

8727f7651c4aa2a21fa7c4f702d82a74
SHA1

34401d19aa201af9a2325596b6706f00b82e279d
SHA256

36187e7f79c7fb297b161a54c590b70f1cb38129d14fcaf91d44616fc205134d
SHA512

2aaec1f6def09ac1320cc62142fed7fc67f914b1b35017395651d57d31cab8e7766cf8a4e716dbad31fe1da35c213c1dfd8dd9d951a64fe7d5990aaad65651a7
SSDEEP

1536:9cGsvP6u1/XVqWFLK4DyjRV6Z8JWx1JBXM9pC9XX8POd:9cPPd/lqILK4Dy1VFuVMTA

Score

1^/10

Malware Config

Signatures

Files

8727f7651c4aa2a21fa7c4f702d82a74_JaffaCakes118
.exe windows:5 windows x86 arch:x86

579bbdad802ae3301d174b191e8cb0a2

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

40:56:76:86:ba:b2:4e:03:d4:66:90:68:18:7a:51:86
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

29/01/2008, 00:00

Not After

28/01/2009, 23:59

Subject

CN=Dominion Inc.,O=Dominion Inc.,POSTALCODE=DM,STREET=14 Marine Street,L=Roseau,ST=Roseau,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetCursorPos
FindWindowExW
PeekMessageW
SendMessageW
OpenDesktopA
GetForegroundWindow
DrawIcon
GetWindowThreadProcessId
GetDlgItemTextA
GetWindowLongW
LoadCursorW
GetMessageW
SetThreadDesktop
PeekMessageA
GetClipboardData
GetClassNameW
GetWindowTextW
ToUnicode
OpenWindowStationA
DispatchMessageW
GetKeyState
GetMessageA
MsgWaitForMultipleObjects
CloseWindowStation
ExitWindowsEx
GetKeyboardState
CloseDesktop
GetDlgItem
CharLowerBuffA
SetProcessWindowStation
EndDialog
GetDlgItemTextW
GetIconInfo

kernel32

CreateDirectoryW
lstrcatW
MultiByteToWideChar
GetSystemTime
GlobalLock
SystemTimeToFileTime
GetTimeZoneInformation
LeaveCriticalSection
SetEvent
lstrcmpiA
WriteFile
CreateFileW
lstrlenA
SetFileTime
lstrcatA
UnmapViewOfFile
GetTickCount
SetFileAttributesW
ResetEvent
SetLastError
GetTempPathW
GetDriveTypeW
InitializeCriticalSection
GetCommandLineA
lstrcpynW
GetCurrentThreadId
GetExitCodeProcess
GetModuleFileNameA
FindClose
FlushFileBuffers
FindResourceW
HeapAlloc
GetCurrentProcessId
SetFilePointer
OpenMutexW
FindFirstFileW
GetModuleHandleA
CreateMutexW
GetLocalTime
GetLastError
GetProcessTimes
GetVersionExW
IsBadReadPtr
lstrcmpiW
GetUserDefaultUILanguage
SetEndOfFile
GetProcessHeap
GetSystemTimeAsFileTime
WriteProcessMemory
ReleaseMutex
GetThreadPriority
MapViewOfFile
GetLogicalDrives
SetThreadPriority
CloseHandle
DeleteFileW
ReadFile
ExpandEnvironmentStringsW

Sections

.qzcvqj
Size: 19KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pmpcf
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pyzyb
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.evwz
Size: 27KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

579bbdad802ae3301d174b191e8cb0a2

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

40:56:76:86:ba:b2:4e:03:d4:66:90:68:18:7a:51:86Certificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

user32

kernel32

Sections

.qzcvqj Size: 19KB - Virtual size: 39KB

.pmpcf Size: 5KB - Virtual size: 10KB

.pyzyb Size: 1024B - Virtual size: 1KB

.evwz Size: 27KB - Virtual size: 132KB

.rsrc Size: 1KB - Virtual size: 4KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

40:56:76:86:ba:b2:4e:03:d4:66:90:68:18:7a:51:86
Certificate

.qzcvqj
Size: 19KB - Virtual size: 39KB

.pmpcf
Size: 5KB - Virtual size: 10KB

.pyzyb
Size: 1024B - Virtual size: 1KB

.evwz
Size: 27KB - Virtual size: 132KB

.rsrc
Size: 1KB - Virtual size: 4KB