b2147b0b2f6635d7ed03b31b2f348481_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b2147b0b2f6635d7ed03b31b2f348481_JaffaCakes118
Size

64KB
MD5

b2147b0b2f6635d7ed03b31b2f348481
SHA1

192dd816999c986f65c18fe851f1a083805d6f30
SHA256

44840277fe04b8a3a15b58c12f411d9407a90c397ece28ec7c64060a191e6aed
SHA512

748cb44efd5602fd7d8d36e0f583a1534757c9285345ae7bfc8e9e3eaba3449738ee1209f1a8e3bb487f48462065eb01ffcc158ea0f51b7e251cca3520cbc6dc
SSDEEP

1536:LLv3bXKm/OsoIGOJEi5Buhq3Pk5+u52ZMLyYoWSerSYjcB+D8zb:fMsoIH5shq3PK52ZM+kZj0+D83

Score

1^/10

Malware Config

Signatures

Files

b2147b0b2f6635d7ed03b31b2f348481_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e66223c37a60e6ff7dda60f883ead36

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09-07-1999 18:31

Not After

09-07-2019 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

01-02-2008 00:00

Not After

31-01-2009 23:59

Subject

CN=InstallProvider Inc.,O=InstallProvider Inc.,POSTALCODE=DM,STREET=15 Cornwall Street,L=Roseau,ST=Dominica,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

BuildSecurityDescriptorA
AddAce
RegQueryValueA
GetTrusteeTypeA
InitializeAcl
QueryServiceObjectSecurity
CryptSetKeyParam
PrivilegeCheck
RegOpenKeyA
BackupEventLogA
GetExplicitEntriesFromAclA
EnumDependentServicesA
GetSecurityDescriptorControl
GetSecurityDescriptorOwner
CryptEncrypt
RegDeleteValueA
GetNumberOfEventLogRecords
GetAclInformation
ChangeServiceConfigA
CryptGetKeyParam
GetServiceDisplayNameA
CopySid
AccessCheck
CryptDestroyHash
FindFirstFreeAce
CryptGenKey
RegFlushKey
RegUnLoadKeyA
CryptHashSessionKey
SetEntriesInAuditListA
ControlService
CryptContextAddRef
RegConnectRegistryA
IsTextUnicode

user32

SetKeyboardState
CreateIconIndirect
SetDebugErrorLevel
GetWindowRect
SetScrollInfo
ShowWindowAsync
OpenDesktopA
TileWindows
ExcludeUpdateRgn
ArrangeIconicWindows
GetMessagePos
IsMenu
RemovePropA
GetDlgCtrlID
DrawTextExA
UnpackDDElParam
AlignRects
IsCharLowerA
BringWindowToTop
CreateAcceleratorTableA
DrawFrame
DdeEnableCallback
SwitchToThisWindow
GetComboBoxInfo
CloseDesktop
RegisterWindowMessageA
CreateDialogParamA
DispatchMessageA
MessageBoxA
GetAsyncKeyState
PostQuitMessage
RedrawWindow
SendMessageTimeoutA
GetClassInfoA
LoadAcceleratorsA
GetClipboardFormatNameA
MonitorFromPoint
GetDC
VkKeyScanA
IsDialogMessage
CheckMenuItem
IMPGetIMEA
InSendMessage
PackDDElParam
GetMenuItemCount
DdeUnaccessData
SetProcessWindowStation
SetCaretBlinkTime
SendIMEMessageExA
EnumPropsExA
SetClipboardData
InvalidateRgn
OemToCharA
CreateWindowExA
FindWindowExA
FreeDDElParam

kernel32

GetCurrentThreadId

Sections

.grapw
Size: 22KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.upopw
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hgbux
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.atcbg
Size: 27KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e66223c37a60e6ff7dda60f883ead36

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0bCertificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

advapi32

user32

kernel32

Sections

.grapw Size: 22KB - Virtual size: 45KB

.upopw Size: 5KB - Virtual size: 10KB

.hgbux Size: 1024B - Virtual size: 1KB

.atcbg Size: 27KB - Virtual size: 132KB

.rsrc Size: 2KB - Virtual size: 4KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0b
Certificate

.grapw
Size: 22KB - Virtual size: 45KB

.upopw
Size: 5KB - Virtual size: 10KB

.hgbux
Size: 1024B - Virtual size: 1KB

.atcbg
Size: 27KB - Virtual size: 132KB

.rsrc
Size: 2KB - Virtual size: 4KB