8ace1312ae0922fca4882b9f8855ff1a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8ace1312ae0922fca4882b9f8855ff1a_JaffaCakes118
Size

65KB
MD5

8ace1312ae0922fca4882b9f8855ff1a
SHA1

a6fd408e4e0ee6fe92ec0e3cf66f4d0f52ece05b
SHA256

ce54ab4699e32795a849e005ea572f349d23cd5e4b71c43d784f73ee5c43116c
SHA512

df9ab379278467d0ca936fda6a27d2727c17a4ea3f878148f4e4575444128098420e970d63b28db9fa23332c0580565e116b450681715aad82e585186d4b628a
SSDEEP

1536:lcNumCBW0nHtt8rsBXcca1U/JCpQKnwKX+/f7p7DJvb:FmCBPnNt8r5ri/cQHKXA7p7DJj

Score

1^/10

Malware Config

Signatures

Files

8ace1312ae0922fca4882b9f8855ff1a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a3e1d9adb5448d15409da270becaee76

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09-07-1999 18:31

Not After

09-07-2019 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

01-02-2008 00:00

Not After

31-01-2009 23:59

Subject

CN=InstallProvider Inc.,O=InstallProvider Inc.,POSTALCODE=DM,STREET=15 Cornwall Street,L=Roseau,ST=Dominica,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateAccelerator
SetMessageExtraInfo
GetNextDlgTabItem
ShowCursor
LoadAcceleratorsA
SwitchToThisWindow
GetSystemMenu
MsgWaitForMultipleObjects
DrawMenuBar
GetMessagePos
CascadeWindows
DdeQueryStringA
ShowWindowAsync
CreateWindowExA
DdeNameService
LookupIconIdFromDirectory
GetDoubleClickTime
DrawCaption
RedrawWindow
GetWindowInfo
UnpackDDElParam
DdeCreateDataHandle
GetDlgCtrlID
MessageBoxA
CreateAcceleratorTableA
InvalidateRgn
SetClipboardData
SetProcessWindowStation
RemovePropA
DdeGetLastError
EnableScrollBar
GetKBCodePage
OpenDesktopA
GetWindowRect
GetDC
MapVirtualKeyExA
SendMessageTimeoutA
UpdateWindow
DdeUnaccessData
DrawTextExA
DdeClientTransaction
EndMenu
CloseDesktop
DlgDirSelectExA
GetComboBoxInfo
SetCaretBlinkTime
EnumPropsExA
SetScrollInfo
GetShellWindow
ScrollDC
GetAsyncKeyState
VkKeyScanA
GetLastActivePopup
ExcludeUpdateRgn

advapi32

SetEntriesInAuditListA
RegDeleteValueA
CryptGetKeyParam
ChangeServiceConfigA
FindFirstFreeAce
OpenEventLogA
GetExplicitEntriesFromAclA
RevertToSelf
AllocateAndInitializeSid
CryptGenKey
CryptContextAddRef
CryptHashSessionKey
CryptSetKeyParam
GetTrusteeTypeA
RegConnectRegistryA
SetServiceStatus
GetMultipleTrusteeA
RegSaveKeyA
AccessCheck
CryptDestroyHash
GetSidSubAuthority
EnumDependentServicesA
GetNumberOfEventLogRecords
RegOpenKeyA
CryptEncrypt
GetSecurityDescriptorOwner
QueryServiceObjectSecurity
ControlService
CopySid
RegFlushKey
GetServiceDisplayNameA
ObjectDeleteAuditAlarmA
GetAclInformation
PrivilegeCheck
DeregisterEventSource
RegUnLoadKeyA

kernel32

GetComputerNameA

Sections

.gxe
Size: 22KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aryj
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shapy
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.grq
Size: 27KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a3e1d9adb5448d15409da270becaee76

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0bCertificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

user32

advapi32

kernel32

Sections

.gxe Size: 22KB - Virtual size: 45KB

.aryj Size: 5KB - Virtual size: 10KB

.shapy Size: 1KB - Virtual size: 2KB

.grq Size: 27KB - Virtual size: 140KB

.rsrc Size: 2KB - Virtual size: 4KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0b
Certificate

.gxe
Size: 22KB - Virtual size: 45KB

.aryj
Size: 5KB - Virtual size: 10KB

.shapy
Size: 1KB - Virtual size: 2KB

.grq
Size: 27KB - Virtual size: 140KB

.rsrc
Size: 2KB - Virtual size: 4KB