a04fb05d66ecb420d963d0b50fca62d9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a04fb05d66ecb420d963d0b50fca62d9_JaffaCakes118
Size

65KB
MD5

a04fb05d66ecb420d963d0b50fca62d9
SHA1

220920c0b37b5a1a0660892d7997549172f34dac
SHA256

9c9036059fc355dd3ba728c2a3904c16c3d36f6014b14e34b5fe33c144b41af9
SHA512

c377e373374197b3f46255ad99ef4456f893243888c072a7f7ae28f041c831ec4d9771c725635dceeaf2a2e66acd9e0e92d528b8993ebb06cee622fe6af21d02
SSDEEP

1536:3FDRl+TkKwcvhr4t6G5/ouCurALB2dnp7fKDCdb:3FtMfhXG5guCukV2bfKDC5

Score

1^/10

Malware Config

Signatures

Files

a04fb05d66ecb420d963d0b50fca62d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec55ca3ace260fe4eea84f93d74cc0fa

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09-07-1999 18:31

Not After

09-07-2019 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

01-02-2008 00:00

Not After

31-01-2009 23:59

Subject

CN=InstallProvider Inc.,O=InstallProvider Inc.,POSTALCODE=DM,STREET=15 Cornwall Street,L=Roseau,ST=Dominica,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetSidSubAuthority
CopySid
InitializeAcl
GetMultipleTrusteeA
FindFirstFreeAce
RegDeleteValueA
GetExplicitEntriesFromAclA
RegOpenKeyA
GetTrusteeTypeA
CryptGetKeyParam
RevertToSelf
AllocateAndInitializeSid
SetServiceStatus
DeregisterEventSource
EnumDependentServicesA
CryptSetKeyParam
GetAclInformation
CryptContextAddRef
ChangeServiceConfigA
OpenEventLogA
BuildSecurityDescriptorA
RegConnectRegistryA
RegFlushKey
CryptDestroyHash
AccessCheck
QueryServiceObjectSecurity
GetNumberOfEventLogRecords
PrivilegeCheck
CryptEncrypt
GetSecurityDescriptorOwner
RegUnLoadKeyA
RegQueryValueA
CryptHashSessionKey
CryptSignHashA
AddAce
SetEntriesInAuditListA
ControlService
BackupEventLogA

user32

SendIMEMessageExA
CheckMenuItem
GetDC
DrawMenuBar
IsDialogMessage
IsMenu
AlignRects
DispatchMessageA
CreateWindowExA
PackDDElParam
GetTopWindow
LoadAcceleratorsA
CopyIcon
GetWindowRect
DrawFrame
ScrollDC
SetWindowContextHelpId
SetWindowRgn
SetScrollInfo
SetMenuDefaultItem
FindWindowExA
GetMenuCheckMarkDimensions
ChangeMenuA
IMPGetIMEA
DefMDIChildProcA
ShowCursor
TranslateAccelerator
LoadIconA
SetDoubleClickTime
GetWindowInfo
wvsprintfA
PostQuitMessage
DdeQueryStringA
ChildWindowFromPointEx
GetClassWord
SwitchToThisWindow
GetSystemMenu
WinHelpA
EnableScrollBar
GetComboBoxInfo
GetClassInfoA
GetMenuState
RegisterWindowMessageA
RedrawWindow
GetLastActivePopup
DrawCaption
GetMenuItemCount
ArrangeIconicWindows
EnumDisplayMonitors
UnhookWinEvent
EnumClipboardFormats
GetMessagePos

Sections

.cxaf
Size: 22KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zwdmv
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zwzc
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cxwt
Size: 27KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec55ca3ace260fe4eea84f93d74cc0fa

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0bCertificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

advapi32

user32

Sections

.cxaf Size: 22KB - Virtual size: 45KB

.zwdmv Size: 5KB - Virtual size: 10KB

.zwzc Size: 1KB - Virtual size: 2KB

.cxwt Size: 27KB - Virtual size: 140KB

.rsrc Size: 2KB - Virtual size: 4KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0b
Certificate

.cxaf
Size: 22KB - Virtual size: 45KB

.zwdmv
Size: 5KB - Virtual size: 10KB

.zwzc
Size: 1KB - Virtual size: 2KB

.cxwt
Size: 27KB - Virtual size: 140KB

.rsrc
Size: 2KB - Virtual size: 4KB