ce8f1c82d2333010f0be9818a529ad86_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ce8f1c82d2333010f0be9818a529ad86_JaffaCakes118
Size

145KB
MD5

ce8f1c82d2333010f0be9818a529ad86
SHA1

598570848b8408a9a31abdeffac4d523e48587b9
SHA256

49675af2b8ecb69f717466b8b78d74ce316d2e71ab9cce3699ab9cb03253aef8
SHA512

d376e7e2e31363e764eb9011a2a00aa9efe650a63b067606d84206fe857c0a5cdb91e9e31c08fef85b94e06851b984f1d564f90679c9902a68b29b817d6f9647
SSDEEP

3072:PZJjYzgTNGp3ujsy/EyhYZ4z1sxtbjIUWno3zm:PZJjYz0YpUgZ4zytb5S

Score

1^/10

Malware Config

Signatures

Files

ce8f1c82d2333010f0be9818a529ad86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c505c5ae9e1208b40aeffa1de93e1ba2

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:53

Not After

16/09/2011, 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:55

Not After

16/09/2011, 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4e:3b:5f:ea:f6:f1:ed:38:3a:9d:f8:e2:07:9f:ed:0e:57:ac:43:4e
Signer

Actual PE Digest

4e:3b:5f:ea:f6:f1:ed:38:3a:9d:f8:e2:07:9f:ed:0e:57:ac:43:4e

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

scanost.pdb

Imports

msvcrt

_controlfp
_onexit
__dllonexit
__set_app_type
__p__fmode
memmove
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_except_handler3

kernel32

LoadLibraryExW
LocalAlloc
FreeLibrary
InterlockedExchange
RaiseException
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualProtect
SetUnhandledExceptionFilter
UnhandledExceptionFilter
lstrlenW
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
MultiByteToWideChar
LoadLibraryA
LoadLibraryW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
LeaveCriticalSection
EnterCriticalSection
FlushInstructionCache
GetCurrentProcess
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
lstrlenA
DebugBreak
HeapFree
HeapDestroy
HeapAlloc
HeapReAlloc
GetSystemInfo
HeapCreate
CloseHandle
GetStartupInfoA
CreateThread
GetTickCount
FormatMessageW
InterlockedIncrement
InterlockedDecrement
IsBadWritePtr
TerminateProcess

msmapi32

ord11
ord15
ord23
ord13
ord21
ord17
ord140

user32

SendMessageW
ScreenToClient
GetDlgCtrlID
RegisterClassExA
GetClassInfoExA
CreateWindowExW
GetMessagePos
wsprintfA
LoadCursorA
DefWindowProcA
CallWindowProcA
SetCursor
DestroyWindow
GetNextDlgTabItem
GetDlgItem
ShowWindow
GetSystemMetrics
DialogBoxParamW
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
EnableWindow
IsDialogMessageA
PostQuitMessage
CheckRadioButton
IsWindow
GetActiveWindow
LoadStringW
MsgWaitForMultipleObjects
MessageBoxW
PostMessageA
SendDlgItemMessageA
SetDlgItemTextW
LoadImageA
EndDialog
SetWindowLongA
GetParent
GetWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
SendMessageA
IsDlgButtonChecked
CheckDlgButton
GetWindowLongA
CreateDialogParamW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExA
RegSetValueExA
RegCloseKey

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c505c5ae9e1208b40aeffa1de93e1ba2

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

61:47:52:ba:00:00:00:00:00:04Certificate

Extended Key Usages

Key Usages

61:49:7c:ed:00:00:00:00:00:05Certificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate

Extended Key Usages

Key Usages

61:46:9e:cb:00:04:00:00:00:65Certificate

Extended Key Usages

Key Usages

4e:3b:5f:ea:f6:f1:ed:38:3a:9d:f8:e2:07:9f:ed:0e:57:ac:43:4eSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

msmapi32

user32

advapi32

Sections

.text Size: 32KB - Virtual size: 31KB

.data Size: 512B - Virtual size: 548B

.cdata Size: 512B - Virtual size: 4B

.rsrc Size: 10KB - Virtual size: 12KB

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

61:47:52:ba:00:00:00:00:00:04
Certificate

61:49:7c:ed:00:00:00:00:00:05
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

61:46:9e:cb:00:04:00:00:00:65
Certificate

4e:3b:5f:ea:f6:f1:ed:38:3a:9d:f8:e2:07:9f:ed:0e:57:ac:43:4e
Signer

.text
Size: 32KB - Virtual size: 31KB

.data
Size: 512B - Virtual size: 548B

.cdata
Size: 512B - Virtual size: 4B

.rsrc
Size: 10KB - Virtual size: 12KB