9ae7b2390d92b4dc127b3a2395d86f64_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

9ae7b2390d92b4dc127b3a2395d86f64_JaffaCakes118
Size

1.3MB
MD5

9ae7b2390d92b4dc127b3a2395d86f64
SHA1

67980a96e36d3b793e8e6659f90c5bd74fb415fe
SHA256

661c207b9f104de23a76a4e5e34d225a4370841a6614cfb2564f93e488adeae2
SHA512

e37904986ffe70e2f69f51d71e6350b4fd37214b06d7c84b84e86c3ed2da87a732a9a94c429757ccdfe3d99cece48a12d1c5855ed7e26fb7fdc0a8cd8313fa9d
SSDEEP

24576:6RAcoQ7s8oT+BJ3eUsky+q7zgdiQ8HpGoJJpQAP:6RNoQ74T0JuUskyVzgdi9rpBP

Score

1^/10

Malware Config

Signatures

Files

9ae7b2390d92b4dc127b3a2395d86f64_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f604a730d82bcf79e9c0633f252c087a

Code Sign

1b:95:2d:63:4d:3f:e4:76:bc:bf:bf:d3:0c:49:ae:60
Certificate

Issuer

CN=TRWKDEDCHIQLRULBSO

Not Before

22-08-2019 19:34

Not After

31-12-2039 23:59

Subject

CN=TRWKDEDCHIQLRULBSO

Extended Key Usages

ExtKeyUsageCodeSigning

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07-06-2005 08:09

Not After

30-05-2020 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

27-04-2011 00:00

Not After

30-05-2020 10:48

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02-05-2019 00:00

Not After

30-05-2020 10:48

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

ad:27:f4:9b:49:5e:df:06:a8:b6:df:74:62:ee:ac:4d:e1:18:70:d4
Signer

Actual PE Digest

ad:27:f4:9b:49:5e:df:06:a8:b6:df:74:62:ee:ac:4d:e1:18:70:d4

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesA
GetFileAttributesExW
GetFileType
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetPrivateProfileIntW
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetProcessShutdownParameters
GetProfileSectionW
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadPriority
GetTickCount
GetUserDefaultLCID
GetVersionExA
GlobalAddAtomW
GlobalHandle
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedDecrement
InterlockedExchange
IsDBCSLeadByteEx
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
FreeEnvironmentStringsA
LoadResource
LocalFree
LocalSize
LocalUnlock
LockResource
MulDiv
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadConsoleOutputCharacterW
RtlUnwind
RtlZeroMemory
ScrollConsoleScreenBufferW
SetConsoleCP
SetFileApisToANSI
SetFilePointer
SetFilePointerEx
SetHandleCount
SetLastError
SetStdHandle
SetTapeParameters
SetThreadLocale
SetThreadUILanguage
SetTimerQueueTimer
SetUnhandledExceptionFilter
SizeofResource
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileSectionA
WritePrivateProfileStructA
lstrcatA
lstrcpyA
lstrcpyW
lstrcpynW
lstrlenW
InterlockedIncrement
Sleep
FormatMessageA
FlushFileBuffers
FindResourceW
FindResourceExW
FindNextFileW
FindNextFileA
FindFirstFileExW
FindClose
FindAtomW
ExitProcess
EnumDateFormatsW
EnterCriticalSection
DeviceIoControl
DeleteCriticalSection
DecodePointer
CreateSemaphoreW
CreateSemaphoreA
CreateHardLinkA
CreateFileW
CreateDirectoryA
CopyFileW
CloseHandle
CallNamedPipeA
LoadModule
AreFileApisANSI

user32

LoadMenuW
LoadStringW
LockWindowUpdate
MapWindowPoints
MessageBoxW
ModifyMenuA
MonitorFromRect
MoveWindow
OpenWindowStationW
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RealGetWindowClassA
RegisterClassW
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageW
SetActiveWindow
SetCapture
SetDlgItemInt
SetDlgItemTextW
SetMenu
SetProcessWindowStation
SetRect
SetTimer
SetUserObjectInformationA
ShowWindow
SystemParametersInfoW
TranslateAcceleratorW
TranslateMessage
LoadIconW
UnregisterClassW
UpdateLayeredWindow
UpdateWindow
WinHelpW
wsprintfW
LoadIconA
KillTimer
IsDialogMessage
IsCharLowerA
InvalidateRect
IntersectRect
IMPSetIMEW
IMPSetIMEA
GetSystemMetrics
GetMessageW
GetMessageTime
GetMenuItemRect
GetDlgItemTextW
GetDlgItemInt
GetDlgItem
GetDesktopWindow
GetDC
GetClassNameA
GetAltTabInfoW
EnumPropsW
EndPaint
EndDialog
DrawTextA
DrawMenuBar
DrawFocusRect
DlgDirListComboBoxW
LoadCursorW
UnhookWindowsHookEx
DispatchMessageW
DialogBoxParamW
DialogBoxIndirectParamA
DestroyIcon
DefWindowProcW
CreateWindowExW
CreateAcceleratorTableA
CopyAcceleratorTableW
CheckMenuItem
CharUpperBuffW
CharNextW
ChangeDisplaySettingsA
BeginPaint
LoadAcceleratorsW

gdi32

GetStockObject
LineTo
MoveToEx
SelectObject
GetLayout
SetLayout
SetPixel
SetROP2
PathToRegion
GetDeviceCaps
DeleteObject
DeleteDC
CreatePen
CreateCompatibleDC
SetDIBitsToDevice
BitBlt
CreateCompatibleBitmap

advapi32

RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExW
RegCloseKey
RegSetValueExW

shell32

ShellAboutW

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 729KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f604a730d82bcf79e9c0633f252c087a

Code Sign

1b:95:2d:63:4d:3f:e4:76:bc:bf:bf:d3:0c:49:ae:60Certificate

Extended Key Usages

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19Certificate

Extended Key Usages

Key Usages

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49Certificate

Extended Key Usages

Key Usages

ad:27:f4:9b:49:5e:df:06:a8:b6:df:74:62:ee:ac:4d:e1:18:70:d4Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 47KB - Virtual size: 47KB

.rdata Size: 1.3MB - Virtual size: 1.3MB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 1KB - Virtual size: 729KB

1b:95:2d:63:4d:3f:e4:76:bc:bf:bf:d3:0c:49:ae:60
Certificate

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

ad:27:f4:9b:49:5e:df:06:a8:b6:df:74:62:ee:ac:4d:e1:18:70:d4
Signer

.text
Size: 47KB - Virtual size: 47KB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 1KB - Virtual size: 729KB