bc040e32157e22a39d687d20f7572839_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

bc040e32157e22a39d687d20f7572839_JaffaCakes118
Size

64KB
MD5

bc040e32157e22a39d687d20f7572839
SHA1

8481789f6f4ef12049046de0027a3ad68d196c7e
SHA256

debd340d55ca472796903cab72cea208e7b1204696e541a88a7cfd43016ea0fa
SHA512

d5c75b813c179bfe4fc4fe7d46017cbd783916f4f9b0854accffa152b67fb8b119b3c1abab20324d8f66f8eb7b72571ff00906a31e3b884c81e54b657c2835d6
SSDEEP

768:Nacw5AQi9v9TWNAvzBknWZGmJdRA0iYxjnko009auEBxWGYQDUo7LXLB:cH+vUwVkAdRA0iYFko009xJED37b

Score

1^/10

Malware Config

Signatures

Files

bc040e32157e22a39d687d20f7572839_JaffaCakes118
.exe windows:4 windows x86 arch:x86

44c4f0eb550683ab071212013fe165e9

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09-07-1999 18:31

Not After

09-07-2019 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

01-02-2008 00:00

Not After

31-01-2009 23:59

Subject

CN=InstallProvider Inc.,O=InstallProvider Inc.,POSTALCODE=DM,STREET=15 Cornwall Street,L=Roseau,ST=Dominica,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLocalesA
GetTapeStatus
SizeofResource
FindResourceA
CopyFileA
ContinueDebugEvent
VirtualFree
GetTempPathA
SetSystemTime
SetConsoleCtrlHandler
CreateMailslotA
GetProfileStringA
CompareStringA
GetLongPathNameA
LockFileEx
ClearCommBreak
SetCommBreak
WaitForMultipleObjects
MoveFileA
GetTimeZoneInformation
lstrcmpi
GenerateConsoleCtrlEvent
SetMailslotInfo
GetPrivateProfileIntA
SearchPathA
CreateThread
FillConsoleOutputAttribute
CreateFileMappingA
lstrlen
LocalAlloc
FlushInstructionCache
WriteConsoleInputA
SetConsoleOutputCP
SetFilePointer
GetProcessShutdownParameters
WriteConsoleOutputAttribute
OpenSemaphoreA
ResumeThread
GlobalLock
OutputDebugStringA
DisconnectNamedPipe
UnlockFileEx
SystemTimeToTzSpecificLocalTime
SetEvent
GetOverlappedResult
LocalShrink
GetComputerNameA
GetLocalTime
CreateNamedPipeA
SetConsoleWindowInfo
GetExitCodeThread
OpenProcess
UTRegister
WriteFile
GetModuleFileNameA
GetPrivateProfileStructA
CancelIo
GlobalUnWire
GetCPInfoExA
GetLogicalDriveStringsA
GetFullPathNameA

shlwapi

ColorHLSToRGB
PathCommonPrefixA
SHRegWriteUSValueA
SHRegCreateUSKeyA
StrChrIA
PathFindOnPathA
UrlCombineA
PathQuoteSpacesA
PathRemoveBlanksA
StrRChrIA
PathIsRelativeA
SHIsLowMemoryMachine
SHRegOpenUSKeyA
SHRegEnumUSKeyA
PathStripToRootA
SHDeleteValueA
PathIsFileSpecA
PathAppendA
UrlGetLocationA
PathGetDriveNumberA
PathSearchAndQualifyA
StrIsIntlEqualA
UrlIsOpaqueA
PathFileExistsA
SHCreateStreamWrapper
AssocQueryStringA
StrCSpnA
StrToIntExA
StrSpnA

advapi32

SetServiceStatus

Sections

.bghab
Size: 22KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oxunq
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jazwz
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zsbcv
Size: 27KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

44c4f0eb550683ab071212013fe165e9

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0bCertificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

shlwapi

advapi32

Sections

.bghab Size: 22KB - Virtual size: 45KB

.oxunq Size: 5KB - Virtual size: 10KB

.jazwz Size: 1KB - Virtual size: 2KB

.zsbcv Size: 27KB - Virtual size: 140KB

.rsrc Size: 2KB - Virtual size: 4KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

3d:49:cd:33:c1:1e:6c:1b:ba:e2:97:1e:37:76:c7:0b
Certificate

.bghab
Size: 22KB - Virtual size: 45KB

.oxunq
Size: 5KB - Virtual size: 10KB

.jazwz
Size: 1KB - Virtual size: 2KB

.zsbcv
Size: 27KB - Virtual size: 140KB

.rsrc
Size: 2KB - Virtual size: 4KB