af447fdc7fade33fd9b0a983cb6de33c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

af447fdc7fade33fd9b0a983cb6de33c_JaffaCakes118
Size

167KB
MD5

af447fdc7fade33fd9b0a983cb6de33c
SHA1

d2e245d3e5d43e73b7e6f6c91b450c5738b650aa
SHA256

978a3e148ebc4b1a240ae0ae0caf847ee7ebc56083db208002c5cac3865bf29f
SHA512

18b21bc8921844b7e32b0119f54d44d2cb999cfef3c596b405a1ceaa81a21a2c5cb77cf37b4e40b27fa8111acb5eb192af2603c9763246c6a7861aab2030242e
SSDEEP

3072:JBW3xb30HtAYEmu0zgG2vtRReY8Ys7yvWUrkRWkucTAs3VJQwnShmMztsQru:JBM30Sxmum/2vzReY8RUps3VJQwnSRK

Score

1^/10

Malware Config

Signatures

Files

af447fdc7fade33fd9b0a983cb6de33c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

b7e916b778aa56e8f69c96c93962095e

Code Sign

0a
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

06-08-2003 00:00

Not After

05-08-2013 23:59

Subject

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

21:e6:0d
Certificate

Issuer

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Not Before

05-10-2005 18:52

Not After

07-10-2006 18:36

Subject

CN=3am Labs\, Inc.,OU=Secure Application Development,O=3am Labs\, Inc.,L=Woburn,ST=Massachusetts,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04-12-2003 00:00

Not After

03-12-2008 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7d:34:a6:c4:8e:cd:92:31:2d:c6:4d:53:d1:aa:5d:a7:5c:b0:fc:bb
Signer

Actual PE Digest

7d:34:a6:c4:8e:cd:92:31:2d:c6:4d:53:d1:aa:5d:a7:5c:b0:fc:bb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperA
IsWindow
MessageBoxA
PostMessageA
RegisterWindowMessageA

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
ExitThread
FlushFileBuffers
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetFullPathNameA
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
OutputDebugStringA
ReadConsoleInputA
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetCurrentDirectoryA
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetFilePointer
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteFile

Sections

AUTO
Size: 129KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 21KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 7KB - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7e916b778aa56e8f69c96c93962095e

Code Sign

0aCertificate

Extended Key Usages

Key Usages

21:e6:0dCertificate

Extended Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate

Extended Key Usages

Key Usages

7d:34:a6:c4:8e:cd:92:31:2d:c6:4d:53:d1:aa:5d:a7:5c:b0:fc:bbSigner

Headers

File Characteristics

Imports

user32

kernel32

Sections

AUTO Size: 129KB - Virtual size:

.idata Size: 2KB - Virtual size:

DGROUP Size: 21KB - Virtual size:

.bss Size: 7KB - Virtual size:

.reloc Size: 8KB - Virtual size:

.rdata Size: 512B - Virtual size:

0a
Certificate

21:e6:0d
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

7d:34:a6:c4:8e:cd:92:31:2d:c6:4d:53:d1:aa:5d:a7:5c:b0:fc:bb
Signer

AUTO
Size: 129KB - Virtual size:

.idata
Size: 2KB - Virtual size:

DGROUP
Size: 21KB - Virtual size:

.bss
Size: 7KB - Virtual size:

.reloc
Size: 8KB - Virtual size:

.rdata
Size: 512B - Virtual size: