c7b81d254fc83e65e8704cea5c74a47a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

c7b81d254fc83e65e8704cea5c74a47a_JaffaCakes118
Size

1.8MB
MD5

c7b81d254fc83e65e8704cea5c74a47a
SHA1

84b3bf92937863f144df6c34fd061c8c517ac848
SHA256

5a2eb1410b4bfafc8b222802609c063548cee8a72bacc6a80bdac1cbbb230f7b
SHA512

e4cd0c9abe728cfe681d33b950a1d5b53689f415453c549dc36258885bcae0c23d1afcb276882048982091eb29673b833bd481392f7ea8c6df9524fa75562180
SSDEEP

49152:/vUj9UF4XC1XflRuenLLe/senLLeumPkcFenLLe7mRenLLeG8j1e99t:/vUj9UOXC1XNRue2Ue2umPve2iRe2VZw

Score

1^/10

Malware Config

Signatures

Files

c7b81d254fc83e65e8704cea5c74a47a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

049b316a110824f8e249dd70e91c12de

Code Sign

0a
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

06-08-2003 00:00

Not After

05-08-2013 23:59

Subject

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

24:32:a2:1f:51:5d:0f:b5:54:29:ed:fa:23:29:c9:4b
Certificate

Issuer

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Not Before

16-06-2009 03:48

Not After

27-03-2010 05:49

Subject

CN=KASHU SYSTEM DESIGN INC.,OU=,O=KASHU SYSTEM DESIGN INC.,L=Kameoka,ST=Kyoto,C=JP

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

5d:95:90:c4:06:38:ae:63:18:20:72:32:96:b5:bb:5a:81:96:71:62
Signer

Actual PE Digest

5d:95:90:c4:06:38:ae:63:18:20:72:32:96:b5:bb:5a:81:96:71:62

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryW
Sleep
lstrlenW
CopyFileW
SetFileAttributesW
lstrcatW
CloseHandle
CreateFileW
FreeLibrary
LoadLibraryW
LockResource
LoadResource
SizeofResource
FindResourceW
GetTempPathW
CompareStringA
CreateFileA
GetDriveTypeA
GetProcessHeap
SetEndOfFile
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
WriteConsoleW
GetTempFileNameW
DeleteFileW
CreateDirectoryW
GetModuleHandleW
lstrcpyW
GetLastError
FormatMessageW
CompareStringW
GetVersionExW
GetConsoleOutputCP
WriteConsoleA
LCMapStringW
GetTimeZoneInformation
FlushFileBuffers
SetStdHandle
LocalAlloc
GetProcAddress
InterlockedExchange
LoadLibraryA
RaiseException
GetFileAttributesW
ExitThread
GetCurrentThreadId
CreateThread
HeapFree
HeapAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
RtlUnwind
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
EnterCriticalSection
LeaveCriticalSection
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
ReadFile
WriteFile
GetStdHandle
GetModuleFileNameA
GetFullPathNameW
GetCurrentDirectoryA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableA

user32

wsprintfW
LoadStringW
MessageBoxW
LoadIconW
DialogBoxParamW
EndDialog
IsDlgButtonChecked
GetDlgItem
SetWindowTextW
EnableWindow
ShowWindow
SetFocus
GetParent
GetDesktopWindow
GetWindowRect
OffsetRect
SetWindowPos
SendMessageW

gdi32

DeleteObject
GetObjectW
CreateFontIndirectW
CreateSolidBrush

advapi32

RegSetValueExW
RegCloseKey
RegCreateKeyExW

shell32

SHGetFolderPathW

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

049b316a110824f8e249dd70e91c12de

Code Sign

0aCertificate

Extended Key Usages

Key Usages

24:32:a2:1f:51:5d:0f:b5:54:29:ed:fa:23:29:c9:4bCertificate

Extended Key Usages

5d:95:90:c4:06:38:ae:63:18:20:72:32:96:b5:bb:5a:81:96:71:62Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 65KB - Virtual size: 65KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 13KB

.rsrc Size: 1.7MB - Virtual size: 1.7MB

0a
Certificate

24:32:a2:1f:51:5d:0f:b5:54:29:ed:fa:23:29:c9:4b
Certificate

5d:95:90:c4:06:38:ae:63:18:20:72:32:96:b5:bb:5a:81:96:71:62
Signer

.text
Size: 65KB - Virtual size: 65KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 13KB

.rsrc
Size: 1.7MB - Virtual size: 1.7MB