aa8ddc73ebf5adef53f64f78c7d86abc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

aa8ddc73ebf5adef53f64f78c7d86abc_JaffaCakes118
Size

243KB
MD5

aa8ddc73ebf5adef53f64f78c7d86abc
SHA1

16b98f6cc4753ec9751c29fbf687f1ee738c1ac2
SHA256

1a7b9cfa07a62ecfa4ff0e3a1920968fbf87a213d35b4c34fdd343d6294dd5b7
SHA512

1aa60f6f74c13fd9a75663c7671e04acb4f46451faaa8c5268acc597be7cc4b2b68892a06139995a7bc09ae7b11de45c4a262616f1cda1b12455019a897c6780
SSDEEP

6144:TW15VR+73zRh81tNA6NXTrCeyAsOFW2Eg1TWWP:TW1DRiDRh8/NdXTrCW7Q2Eg1T

Score

1^/10

Malware Config

Signatures

Files

aa8ddc73ebf5adef53f64f78c7d86abc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6cd73cfa21d0331ba843d710e5da10ae

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

22:5c:8b:52:64:05:84:16:3e:c1:83:50:17:de:d7:81
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

30/01/2007, 00:00

Not After

15/02/2008, 23:59

Subject

CN=Trend Micro\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=RD,O=Trend Micro\, Inc.,L=Taipei,ST=Taiwan,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetComputerNameW
GetLogicalDriveStringsA
IsBadWritePtr
GetComputerNameA
GetModuleHandleW
CompareFileTime
GetVersion
OpenWaitableTimerA
WinExec
GetLogicalDrives
LoadResource
GetShortPathNameA
IsBadReadPtr
GetTimeFormatW
FileTimeToLocalFileTime
Sleep
GetFileAttributesW
ReadDirectoryChangesW
SetComputerNameA
DuplicateHandle
OpenMutexW
GetVersionExW
IsBadCodePtr
TlsAlloc
SetLocaleInfoW
GetExpandedNameW
WaitForMultipleObjects
GetExitCodeProcess
IsDebuggerPresent
SetCurrentDirectoryW
CreateDirectoryW
lstrcpyn
CopyFileA
GetSystemDefaultLangID
lstrlenW
GetExitCodeThread
GlobalGetAtomNameW
GetCurrentThread
GetLocaleInfoW
GetModuleFileNameW
InitializeCriticalSection
GetTimeFormatA
GetLastError
GetStringTypeA
IsValidCodePage
OpenEventW
GetExpandedNameA
SetErrorMode
GetVolumeInformationW
FindAtomA
GetEnvironmentStringsW
GetDateFormatA
GetProcAddress
CopyFileExA
GetEnvironmentStringsA
lstrcatA
GetAtomNameW
GetUserDefaultLCID
OpenSemaphoreA
LoadLibraryW
SetEvent
lstrlen
CreateMutexA
GetWindowsDirectoryW
GetSystemTime
EnumTimeFormatsA
lstrcpynA
CopyFileExW
GetDiskFreeSpaceW
RemoveDirectoryA
EnumDateFormatsA
LoadLibraryA
GetHandleInformation
GetTempFileNameA
SearchPathA
CreateSemaphoreA
CreateNamedPipeW
ExitProcess
GetEnvironmentVariableW
EnumDateFormatsW
GetShortPathNameW
GetStartupInfoA
LocalAlloc
HeapCreate
SearchPathW
LoadLibraryExA
BeginUpdateResourceW
CreateMutexW
GetCurrentProcess
CreateDirectoryA
FindResourceA
ExpandEnvironmentStringsA
GetEnvironmentVariableA
FileTimeToSystemTime
MulDiv
GetMailslotInfo
GetLocalTime
FreeLibrary
GetCPInfo
OpenSemaphoreW
GetModuleHandleA
GetVolumeInformationA
CreateNamedPipeA
GetWindowsDirectoryA
GetStartupInfoW
GlobalDeleteAtom
GetCalendarInfoW
SleepEx
GetCurrentThreadId
RemoveDirectoryW
DeleteAtom

user32

MessageBoxIndirectW
SetCapture
LoadMenuIndirectW
GetWindowRgn
CharLowerW
GetMenuItemInfoA
WinHelpA
CreateDialogParamW
LoadMenuA
GetKeyboardLayout
InvalidateRect
CopyRect
CreateDialogParamA
IsIconic
RegisterClassA
GetKeyState
GetForegroundWindow
IsMenu
EnableWindow
GetMenuState
GetMessageW
CreateDesktopW
DialogBoxParamW
EmptyClipboard
GetCapture
GetKeyboardType
PostMessageW
DialogBoxIndirectParamW
MessageBeep
GetCursorPos
CharUpperA
GetMenuItemID
RegisterClassExA
SendMessageW
AppendMenuA
ActivateKeyboardLayout
SetDlgItemInt
SetWindowTextA
LoadCursorA
CreateWindowExW
CreateDialogIndirectParamA
CheckMenuItem
GetSysColor
LoadCursorW
LoadImageA
GetMenuStringA
GetAsyncKeyState
CreateWindowExA
CharPrevA
PeekMessageA
GetSubMenu
EndMenu
CreateAcceleratorTableA
EndDialog
SetWindowTextW
GetClassInfoW
MonitorFromPoint
SetCursorPos
SetWindowLongW
GetMenuItemRect
SetDlgItemTextA
CreatePopupMenu
WinHelpW
EnumWindows
SetDlgItemTextW
LoadIconW
SetTimer
GetSystemMetrics
SetCursor
RegisterWindowMessageW
GetTopWindow
DestroyIcon
DestroyMenu
DefWindowProcW
AdjustWindowRect
InsertMenuItemA
CharNextW
GetMenuItemInfoW
RegisterClassW
PostQuitMessage
GetActiveWindow
TrackPopupMenuEx
DialogBoxParamA
wsprintfW
LoadMenuW
SetWindowRgn
SetParent
RegisterWindowMessageA
GetCaretPos
wvsprintfW
GetSysColorBrush
GetMenuStringW
CreateDialogIndirectParamW
SetWindowPos
WaitMessage
GetMessageA
FindWindowA
InsertMenuItemW
mouse_event
GetDesktopWindow
GetDlgItemTextW
DefWindowProcA
SetFocus
DialogBoxIndirectParamA
InvalidateRgn
CreateMenu
SetMenu
RemoveMenu
FindWindowW
LoadIconA
GetDCEx
LoadMenuIndirectA
AppendMenuW
IsChild
EnableMenuItem
ShowCursor
SendDlgItemMessageA
GetDlgItemTextA
GetDlgItemInt
MoveWindow
GetClassInfoExA
GetIconInfo
PeekMessageW
UpdateLayeredWindow
IsDlgButtonChecked
MessageBoxIndirectA
GetMenuItemCount
GetFocus
WaitForInputIdle
LoadBitmapA
SetActiveWindow
InsertMenuA
GetScrollPos
UnregisterClassA
IsWindow
CharPrevW
LoadBitmapW
UnregisterClassW
CopyIcon
GetMenuInfo
OpenClipboard
OffsetRect
ShowCaret

gdi32

CreateMetaFileA
CreateColorSpaceW
DeleteObject
CreateDIBPatternBrush
CreateFontA
SelectBrushLocal
GetMetaFileA
CreateBitmap
ExtCreateRegion
CreateRoundRectRgn
CreateScalableFontResourceW
GdiGetBatchLimit

advapi32

SetInformationCodeAuthzLevelW
MakeSelfRelativeSD
GetSecurityDescriptorControl
FlushTraceW
SystemFunction022
AdjustTokenPrivileges
CredGetTargetInfoW
WmiMofEnumerateResourcesA

shell32

StrStrIW
StrRStrW
StrCmpNA
ShellExecuteW
SHGetDataFromIDListW
Shell_NotifyIcon
StrChrW
StrCmpNIA
StrRChrIW
SHGetFolderPathW
StrRChrW
ExtractIconA
SHGetDiskFreeSpaceExA
SHCreateDirectory
ExtractIconEx
ExtractAssociatedIconExW

shlwapi

StrStrIW
StrRStrIW
PathSearchAndQualifyA
PathUnmakeSystemFolderA
SHRegWriteUSValueA
SHDeleteValueW
StrTrimW
PathRemoveFileSpecA
GetMenuPosFromID
SHRegGetPathW
UrlEscapeA
PathMatchSpecW
SHRegQueryInfoUSKeyW

oleaut32

VarR4FromDec
VarBstrFromR4
VarBstrFromI4
VarFormatPercent
VarUI1FromI2

opengl32

glPixelMapusv
glRectd
wglChoosePixelFormat
wglGetLayerPaletteEntries
glCopyTexImage1D
glCopyTexImage2D
glLightf
glPixelStorei
glVertex4i
glDisable

setupapi

CM_Get_First_Log_Conf
SetupDiSetDeviceInstallParamsA
SetupDiGetDeviceInterfaceDetailA
SetupDiClassNameFromGuidExA
SetupDiInstallClassExW

urlmon

CoInternetGetSecurityUrl
AsyncInstallDistributionUnit
CoInternetGetProtocolFlags
URLOpenBlockingStreamW
CopyBindInfo
FindMediaType
CDLGetLongPathNameW
URLDownloadToCacheFileA
URLOpenPullStreamA

imm32

ImmRegisterWordW
ImmReleaseContext

oledlg

OleUIAddVerbMenuW
OleUIObjectPropertiesW
OleUIChangeSourceW

Sections

.f
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gHlUwm
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jKARy
Size: 5KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.r
Size: 4KB - Virtual size: 395KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Yo
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.YFV
Size: 9KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.IV
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.FQmGBv
Size: 11KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.EFhE
Size: 1024B - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6cd73cfa21d0331ba843d710e5da10ae

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

22:5c:8b:52:64:05:84:16:3e:c1:83:50:17:de:d7:81Certificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

oleaut32

opengl32

setupapi

urlmon

imm32

oledlg

Sections

.f Size: 7KB - Virtual size: 6KB

.gHlUwm Size: 89KB - Virtual size: 89KB

.jKARy Size: 5KB - Virtual size: 477KB

.r Size: 4KB - Virtual size: 395KB

.Yo Size: 11KB - Virtual size: 11KB

.YFV Size: 9KB - Virtual size: 26KB

.IV Size: 90KB - Virtual size: 90KB

.FQmGBv Size: 11KB - Virtual size: 112KB

.EFhE Size: 1024B - Virtual size: 143KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 1KB - Virtual size: 1KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

22:5c:8b:52:64:05:84:16:3e:c1:83:50:17:de:d7:81
Certificate

.f
Size: 7KB - Virtual size: 6KB

.gHlUwm
Size: 89KB - Virtual size: 89KB

.jKARy
Size: 5KB - Virtual size: 477KB

.r
Size: 4KB - Virtual size: 395KB

.Yo
Size: 11KB - Virtual size: 11KB

.YFV
Size: 9KB - Virtual size: 26KB

.IV
Size: 90KB - Virtual size: 90KB

.FQmGBv
Size: 11KB - Virtual size: 112KB

.EFhE
Size: 1024B - Virtual size: 143KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 1KB - Virtual size: 1KB