dbd9ee3c83f0c88ef9ff2ff7452d9724_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

dbd9ee3c83f0c88ef9ff2ff7452d9724_JaffaCakes118
Size

152KB
MD5

dbd9ee3c83f0c88ef9ff2ff7452d9724
SHA1

9845ba102587972dfaf9e26b211a928b106e39c9
SHA256

ca57a1123fb7947e5a619f88dc800dc7e818b8a0b81835f8d23e85a4f5181db4
SHA512

59e585f02a06535e2454e5cc61d119f9e51ff0234f3296a21a23dcfa66f58b8de88df92f13b54ed28070d2e051ebf6da5782bc46181c96c0b1a6c3657e040bd9
SSDEEP

768:MEn/TyZ5Grf5YwnXREAnwbs1dkNdJkUSim3jK61l81xLKM+kcv:L/OCGwKAPYuTKcl8rKM+kcv

Score

1^/10

Malware Config

Signatures

Files

dbd9ee3c83f0c88ef9ff2ff7452d9724_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dcdb273bb03bca134f25eaf87cbda5fe

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

09/04/1996, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

16/11/1999, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service CA SW1,OU=VeriSign Trust Network+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5c
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

04/04/2000, 00:00

Not After

17/04/2001, 23:59

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExW

gdi32

DeleteObject
GetCharWidth32A
SelectPalette
CreateFontIndirectA
GetTextExtentPointW
GetDeviceCaps
RealizePalette
SelectObject
GetStockObject

kernel32

GlobalAlloc
GetModuleHandleA
GetCommandLineA
GetLastError
GlobalFree
GlobalUnlock
GlobalLock
GetStartupInfoA
GlobalDeleteAtom
GlobalAddAtomA
InterlockedIncrement
InterlockedDecrement
MulDiv
ExitProcess
IsDBCSLeadByte
GetTempFileNameA
GetTempPathA
LocalFree
FormatMessageA
CloseHandle
SetLastError
GetCurrentDirectoryA
SetCurrentDirectoryA
Sleep
WinExec
GetVersion
GlobalHandle
GlobalSize
GetVersionExA
CreateProcessA
CreateProcessW
lstrcpyA
FindClose
FindFirstFileA
ReadFile
OpenFile
GetProcAddress
LoadLibraryA
DeleteFileA
MultiByteToWideChar
LoadLibraryW
WideCharToMultiByte

ole32

CoRevokeClassObject
OleInitialize
StgCreateDocfile
CreateFileMoniker
GetRunningObjectTable
OleUninitialize
CoInitialize
CoUninitialize
RevokeDragDrop
RegisterDragDrop
CoRegisterClassObject

user32

DefWindowProcA
SendMessageA
PostQuitMessage
DdeConnect
DdeQueryConvInfo
IsIconic
ShowWindow
DispatchMessageA
TranslateMessage
GetMessageA
DestroyWindow
FreeDDElParam
UnpackDDElParam
PostMessageA
PackDDElParam
DrawMenuBar
DeleteMenu
GetMenuItemCount
GetSystemMenu
CreateWindowExA
GetSystemMetrics
RegisterClassExA
GetWindowLongA
GetParent
GetWindow
SetFocus
SetActiveWindow
EnumWindows
ReuseDDElParam
GetDesktopWindow
SetForegroundWindow
SystemParametersInfoA
ReleaseDC
GetDC
GetActiveWindow
EnableWindow
GetClassNameA
GetWindowThreadProcessId
UnregisterClassA
RegisterClassA
DdeInitializeA
DdeInitializeW
MessageBoxA
MessageBeep
DdeCreateStringHandleA
DdeCreateStringHandleW
DdeDisconnect
DdeClientTransaction
WaitForInputIdle
DdeUninitialize
DdeFreeStringHandle

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dcdb273bb03bca134f25eaf87cbda5fe

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10Certificate

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1dCertificate

Extended Key Usages

Key Usages

75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5cCertificate

Key Usages

Signer

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

ole32

user32

Sections

.text Size: 24KB - Virtual size: 21KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 52KB - Virtual size: 68KB

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1d
Certificate

75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5c
Certificate

.text
Size: 24KB - Virtual size: 21KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 52KB - Virtual size: 68KB