d628bf03f50923e9a44ebeba20acc6cd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d628bf03f50923e9a44ebeba20acc6cd_JaffaCakes118
Size

524KB
MD5

d628bf03f50923e9a44ebeba20acc6cd
SHA1

4a9450ad02f34c1a4650e4e9626bc1122e4c3263
SHA256

a1006263b6f4159f7d0142c07d9811b2c9ce02dfc56c710ba3ed8970d7e7550e
SHA512

040a82d9197413a5000d052b4dc6efa24c69b20b41b278cbf9a9b6175a5b4cd8359ad104ce4921ad1c3b979252ac0780c1239e2f3b2af1a8e0651b8725170abc
SSDEEP

1536:m0kOXZocfjDuvfdYNoGfLRGGOL2Cyeu+Kfo2WadhIKmUQG2HIctERxCx:mOJzAayYrw4eu+KAkmUQG2octG

Score

1^/10

Malware Config

Signatures

Files

d628bf03f50923e9a44ebeba20acc6cd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e23bd8506e586799719e268a891c1c88

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05/11/2009, 00:00

Not After

10/12/2010, 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

e7:cd:1c:94:e9:25:c6:24:01:3c:4e:8a:a0:b7:12:ef:cf:aa:4a:f8
Signer

Actual PE Digest

e7:cd:1c:94:e9:25:c6:24:01:3c:4e:8a:a0:b7:12:ef:cf:aa:4a:f8

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\bslave-products\codec_sdk_nosamples_mc_win32_ia32\build\mux_mp2\src\obj_ia32_win32_msvc_release_shared_mc_\mux_mp2.pdb

Imports

kernel32

GetCurrentProcess
CreateSemaphoreA
WaitForSingleObject
ReleaseSemaphore
CloseHandle
CreateEventA
SetEvent
CreateThread
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
ReadFile
SetFilePointer
GetFileType
CreateFileA
GetSystemTimeAsFileTime
GetCommandLineA
GetVersionExA
GetProcessHeap
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetStdHandle
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
FlushFileBuffers
GetFullPathNameA
GetCurrentDirectoryA
SetStdHandle
SetHandleCount
GetStartupInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
GetLocaleInfoA
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

mpegOutMP2Mux
mpegOutMP2MuxAddFile
mpegOutMP2MuxAddFileBS
mpegOutMP2MuxAddProgram
mpegOutMP2MuxAddStream
mpegOutMP2MuxAuxinfo
mpegOutMP2MuxCheckConnect
mpegOutMP2MuxChkSettings
mpegOutMP2MuxCommitPSI
mpegOutMP2MuxDefaults
mpegOutMP2MuxDefaultsExt
mpegOutMP2MuxDone
mpegOutMP2MuxFree
mpegOutMP2MuxGetAPIExt
mpegOutMP2MuxInitFile
mpegOutMP2MuxInitFileBS
mpegOutMP2MuxInitStream
mpegOutMP2MuxLoadDescriptor
mpegOutMP2MuxLoadEntry
mpegOutMP2MuxLoadSection
mpegOutMP2MuxNew
mpegOutMP2MuxRun
mpegOutMP2MuxRuntimeConfig

Sections

.text
Size: 356KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e23bd8506e586799719e268a891c1c88

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1Certificate

Extended Key Usages

Key Usages

e7:cd:1c:94:e9:25:c6:24:01:3c:4e:8a:a0:b7:12:ef:cf:aa:4a:f8Signer

Headers

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 356KB - Virtual size: 353KB

.rdata Size: 68KB - Virtual size: 64KB

.data Size: 64KB - Virtual size: 70KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 24KB - Virtual size: 23KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

e7:cd:1c:94:e9:25:c6:24:01:3c:4e:8a:a0:b7:12:ef:cf:aa:4a:f8
Signer

.text
Size: 356KB - Virtual size: 353KB

.rdata
Size: 68KB - Virtual size: 64KB

.data
Size: 64KB - Virtual size: 70KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 24KB - Virtual size: 23KB