b92fa9fa8d428eace02a31a511f40eb6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b92fa9fa8d428eace02a31a511f40eb6_JaffaCakes118
Size

99KB
MD5

b92fa9fa8d428eace02a31a511f40eb6
SHA1

b3efd4b98475ca366b93a2a6aa61f3c9dd6e5cde
SHA256

d3acbe41dded6fa07c01ed7540812ecab10273674d82e222d74f15517f1a5e7a
SHA512

1a28085418d35e38d37ec03e16ab9bca5ea5ad5aeb11db0001f30f258eadaf9ac6a0d9db54a0acab49175cd3452c70017e195595d8f4c2a36e360534491c410c
SSDEEP

1536:ZBZBBRbGD6XE0krmEQt/GcC4jFd53G8ySI7a50RF+NL8mRTLGegdr0R:hRbgDbiYcCAHFG8R5tLFTSewrM

Score

1^/10

Malware Config

Signatures

Files

b92fa9fa8d428eace02a31a511f40eb6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

30822e8dd8f85c0f609108f7b7847727

Code Sign

47:23:1e:db:86:d3:f0:a1:4c:28:6b:15:4d:05:d4:81
Certificate

Issuer

CN=WPKMEHJAEELVLJGQEC

Not Before

29/05/2019, 16:06

Not After

31/12/2039, 23:59

Subject

CN=WPKMEHJAEELVLJGQEC

Extended Key Usages

ExtKeyUsageCodeSigning

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

27/04/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

30/05/2020, 10:48

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b4:f2:bc:d0:9e:48:d0:8f:f4:33:a6:aa:68:c8:0a:1e:e3:f3:e6:2a
Signer

Actual PE Digest

b4:f2:bc:d0:9e:48:d0:8f:f4:33:a6:aa:68:c8:0a:1e:e3:f3:e6:2a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
GetSystemDefaultLangID
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTickCount
GetVersion
GetVersionExW
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
InterlockedCompareExchange
InterlockedExchange
IsDBCSLeadByte
IsDebuggerPresent
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockResource
GetModuleHandleW
MultiByteToWideChar
OpenEventW
QueryPerformanceCounter
RaiseException
ReadFile
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcatW
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenA
lstrlenW
VirtualAllocEx
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFileSize
GetFileAttributesA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryA
GetComputerNameW
GetCommandLineW
GetCPInfo
GetACP
FreeResource
FreeLibrary
FormatMessageW
FormatMessageA
FlushFileBuffers
FindResourceA
FindNextFileA
FindFirstFileA
FindClose
ExpandEnvironmentStringsW
ExitProcess
EnumResourceLanguagesA
DeleteFileA
CreateThread
CreateProcessA
CreateMutexW
CreateFileW
CreateFileA
CreateEventW
CreateDirectoryW
MulDiv
CloseHandle

user32

DefWindowProcA
DeferWindowPos
DeleteMenu
DestroyCaret
DestroyCursor
DestroyMenu
DestroyWindow
DialogBoxIndirectParamA
DispatchMessageA
DrawFocusRect
DrawMenuBar
DrawTextA
DrawTextExA
EmptyClipboard
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndDialog
EndPaint
EnumChildWindows
EnumThreadWindows
EqualRect
ExcludeUpdateRgn
ExitWindowsEx
FillRect
FindWindowExA
FlashWindow
FrameRect
GetActiveWindow
GetAsyncKeyState
GetCapture
DefMDIChildProcA
GetClassInfoA
GetClassInfoExA
GetClassLongA
GetClientRect
GetClipboardData
GetClipboardFormatNameA
GetCursorPos
GetDC
GetDialogBaseUnits
GetDlgCtrlID
GetDlgItem
GetDlgItemInt
GetDlgItemTextA
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetKeyState
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuStringA
GetMessageA
GetMessagePos
GetMessageTime
GetParent
GetPriorityClipboardFormat
GetPropA
GetScrollInfo
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColor
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetUpdateRect
GetUpdateRgn
GetWindow
GetWindowDC
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
HideCaret
InSendMessage
InflateRect
InsertMenuA
IntersectRect
InvalidateRect
InvalidateRgn
InvertRect
IsCharAlphaA
IsCharAlphaNumericA
IsChild
IsClipboardFormatAvailable
IsDialogMessageA
IsDlgButtonChecked
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
LoadMenuA
MessageBeep
MessageBoxA
ModifyMenuA
MoveWindow
OemToCharA
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RegisterClassA
RegisterClassExA
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ReplyMessage
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendMessageA
SetActiveWindow
SetCapture
SetCaretPos
SetClassLongA
SetClipboardData
SetCursor
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetMenu
SetMessageQueue
SetParent
SetPropA
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetUserObjectSecurity
SetWindowLongA
SetWindowPos
SetWindowTextA
SetWindowsHookExA
ShowCaret
ShowCursor
ShowScrollBar
ShowWindow
ToAsciiEx
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
ValidateRect
VkKeyScanA
WaitMessage
WindowFromPoint
DefFrameProcA
DdeUninitialize
DdeUnaccessData
DdeQueryStringA
DdePostAdvise
DdeNameService
DdeKeepStringHandle
DdeInitializeA
DdeGetLastError
DdeGetData
DdeFreeStringHandle
DdeFreeDataHandle
DdeEnableCallback
DdeDisconnect
DdeCreateStringHandleA
DdeCreateDataHandle
DdeConnectList
DdeConnect
DdeCmpStringHandles
DdeClientTransaction
DdeAddData
DdeAccessData
CreateWindowExA
CreateMenu
CreateDialogParamA
CreateCaret
CloseClipboard
ClientToScreen
CheckRadioButton
CheckMenuItem
CheckDlgButton
CharUpperA
CharPrevW
CharLowerA
CallWindowProcA
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
AppendMenuA
GetCaretPos

gdi32

GetTextAlign
bMakePathNameW
SetBrushOrgEx
RemoveFontResourceExW
RectVisible
GetGlyphOutlineWow
GetCurrentPositionEx
GetCharWidthFloatA
GetCharWidth32A
GdiSetPixelFormat
GdiEntry6
GdiDescribePixelFormat
GdiDeleteSpoolFileHandle
GdiAlphaBlend
FONTOBJ_pfdg
EnumMetaFile
EnumICMProfilesA
CheckColorsInGamut
CreateColorSpaceA
DeviceCapabilitiesExA

advapi32

RegQueryValueExA
StartServiceCtrlDispatcherW
SetServiceStatus
ReportEventW
RegisterServiceCtrlHandlerW
RegisterEventSourceW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

shlwapi

wnsprintfA

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30822e8dd8f85c0f609108f7b7847727

Code Sign

47:23:1e:db:86:d3:f0:a1:4c:28:6b:15:4d:05:d4:81Certificate

Extended Key Usages

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19Certificate

Extended Key Usages

Key Usages

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49Certificate

Extended Key Usages

Key Usages

b4:f2:bc:d0:9e:48:d0:8f:f4:33:a6:aa:68:c8:0a:1e:e3:f3:e6:2aSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

shlwapi

Sections

.text Size: 69KB - Virtual size: 69KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 13KB - Virtual size: 12KB

47:23:1e:db:86:d3:f0:a1:4c:28:6b:15:4d:05:d4:81
Certificate

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

b4:f2:bc:d0:9e:48:d0:8f:f4:33:a6:aa:68:c8:0a:1e:e3:f3:e6:2a
Signer

.text
Size: 69KB - Virtual size: 69KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 13KB - Virtual size: 12KB