a238b5d8386ee879b63fa0118f376e85_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a238b5d8386ee879b63fa0118f376e85_JaffaCakes118
Size

11KB
MD5

a238b5d8386ee879b63fa0118f376e85
SHA1

f5b30c87dc03d2cc2a188261e7ba9865a6e8607a
SHA256

fa58a954a3d80c85b6935ccd7c247c89172b2874e519f8701dc4caa4af601194
SHA512

1c198c2e4f352871e2f973096119d0899c33abe962dc65acf3812493a4f671894df9a67c2d611a90c506f523a93198442e82a728b0d77f1c3114e8a79bb971d6
SSDEEP

192:1YEcNhCefHuVvNzNCT21VWl92NGossJ608cQKPnEtTIXXYxjaIhjDQov703UZ9e:p8HfHuVFCSVi2MosK6dcLz4Z/jUoA3Ig

Score

1^/10

Malware Config

Signatures

Files

a238b5d8386ee879b63fa0118f376e85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11230e9744c56754480a43b992118932

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:27:81:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/10/2008, 21:24

Not After

22/01/2010, 21:34

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:55

Not After

16/09/2011, 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ba:f6:f8:41:c2:61:ac:c7:e7:cd:cd:d4:0e:88:c0:3b:4d:99:3e:d2
Signer

Actual PE Digest

ba:f6:f8:41:c2:61:ac:c7:e7:cd:cd:d4:0e:88:c0:3b:4d:99:3e:d2

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
WinExec
GetTickCount
GetTempPathA
GetProcAddress
LoadLibraryA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetWindowsDirectoryA
GetCommandLineA
GetVersionExA
GetLocalTime
ExitProcess
Sleep
CopyFileA
GetLastError
LocalAlloc
InterlockedExchange
RaiseException
FreeLibrary

user32

wsprintfA

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
_itoa
fopen
fscanf
fclose
strchr
_stricmp

rpcrt4

UuidCreateSequential

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11230e9744c56754480a43b992118932

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate

Extended Key Usages

Key Usages

61:06:27:81:00:00:00:00:00:08Certificate

Extended Key Usages

Key Usages

61:49:7c:ed:00:00:00:00:00:05Certificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

ba:f6:f8:41:c2:61:ac:c7:e7:cd:cd:d4:0e:88:c0:3b:4d:99:3e:d2Signer

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

rpcrt4

Sections

.text Size: 5KB - Virtual size: 4KB

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:06:27:81:00:00:00:00:00:08
Certificate

61:49:7c:ed:00:00:00:00:00:05
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

ba:f6:f8:41:c2:61:ac:c7:e7:cd:cd:d4:0e:88:c0:3b:4d:99:3e:d2
Signer

.text
Size: 5KB - Virtual size: 4KB