fd62fafa7c78bf3fd3aadf766ff1fc99_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fd62fafa7c78bf3fd3aadf766ff1fc99_JaffaCakes118
Size

134KB
MD5

fd62fafa7c78bf3fd3aadf766ff1fc99
SHA1

ca40a01769c32ef953ee697158ceab9d82ec651a
SHA256

9268a4aa6ba2bfcc28aaec009edabb8f958e21daedad2a13f10b87a3eea50e3c
SHA512

e52ea0843913aa45a04d5a8b47d4275d85e98a1b386f4244c2e8aca7e5acc9275d1d0109e66527277d7fa6e163ff7cbf88064153fbeaa6b4494d7956794a95f7
SSDEEP

3072:9XAxt4uylSM0zijiK6Y4wQ1oP3i9AFPdXdZ47AhmXYb/S:mv4uylSkjiKV4w9P3i9A3Xj/ho

Score

1^/10

Malware Config

Signatures

Files

fd62fafa7c78bf3fd3aadf766ff1fc99_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ca6834a14117e02d1e28ae4f1cfb5702

Code Sign

32:9c:a9:7f:ee:93:50:49:b3:b2:fe:bc:c8:68:fc:ec
Certificate

Issuer

CN=FNXAUGHC

Not Before

28/03/2019, 20:50

Not After

31/12/2039, 23:59

Subject

CN=FNXAUGHC

Extended Key Usages

ExtKeyUsageCodeSigning

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

cf:89:3e:2a:57:9d:29:ef:b1:c9:9a:c9:6e:18:8d:2f:a9:ce:97:d4:40:54:b7:45:e1:63:2a:f3:b1:b0:5d:f7
Signer

Actual PE Digest

cf:89:3e:2a:57:9d:29:ef:b1:c9:9a:c9:6e:18:8d:2f:a9:ce:97:d4:40:54:b7:45:e1:63:2a:f3:b1:b0:5d:f7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
GetACP
GetAtomNameA
GetAtomNameW
GetCPInfo
GetCalendarInfoW
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesA
GetFileAttributesExA
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFullPathNameA
GetHandleInformation
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcessHeap
GetProfileIntA
GetShortPathNameA
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeExA
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameA
GetThreadLocale
GetThreadPriority
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExA
GetVolumeInformationA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFlags
GlobalFree
GlobalGetAtomNameA
GlobalGetAtomNameW
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
FreeLibrary
InterlockedExchange
InterlockedIncrement
IsBadReadPtr
IsDebuggerPresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryW
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LocalReAlloc
LocalShrink
LockFile
LockResource
MapViewOfFile
Module32NextW
MoveFileA
MulDiv
MultiByteToWideChar
OpenEventA
OpenFileMappingA
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadFile
ResumeThread
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileAttributesA
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WinExec
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringA
lstrcatW
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrcpyW
lstrcpyn
lstrcpynW
lstrlenA
lstrlenW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageA
FlushFileBuffers
FindResourceExA
FindResourceA
FindFirstFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FatalExit
FatalAppExitA
ExitThread
ExitProcess
EnumSystemLocalesA
EnumResourceLanguagesA
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteCriticalSection
DeleteAtom
DebugBreak
CreateThread
CreateFileMappingA
CreateFileA
CreateEventA
CreateDirectoryA
CopyFileA
ConvertDefaultLocale
CompareStringW
CompareStringA
CloseHandle
AssignProcessToJobObject
AddAtomW
LoadLibraryA
GetProcAddress
InterlockedDecrement
GetModuleHandleW

user32

GetKeyState
GetLastActivePopup
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMessagePos
GetMessageTime
GetMessageW
GetNextDlgTabItem
GetParent
GetPropW
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetWindow
GetWindowDC
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextW
GetWindowThreadProcessId
GrayStringW
IntersectRect
IsChild
IsDialogMessageW
IsIconic
IsWindow
IsWindowEnabled
IsWindowVisible
KillTimer
LoadBitmapW
LoadCursorW
LoadIconW
LoadStringW
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
MoveWindow
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemovePropW
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetCursor
SetFocus
SetForegroundWindow
SetMenuItemBitmaps
SetPropW
SetRect
SetTimer
SetWindowContextHelpId
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
TabbedTextOutW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WinHelpW
wsprintfW
wvsprintfA
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetActiveWindow
EqualRect
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DrawIcon
DispatchMessageW
DestroyWindow
DestroyMenu
DefWindowProcW
CreateWindowExW
CreateDialogIndirectParamW
CopyRect
ClientToScreen
CheckMenuItem
CharUpperW
CharNextW
CallWindowProcW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
GetTopWindow
GetForegroundWindow

advapi32

RegOpenKeyA

comctl32

ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Read
ImageList_Remove
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetDragCursorImage
ImageList_SetIconSize
ImageList_Write
InitCommonControlsEx
_TrackMouseEvent

imm32

ImmAssociateContext
ImmGetCompositionStringW
ImmGetCompositionWindow
ImmGetContext
ImmGetOpenStatus
ImmNotifyIME
ImmReleaseContext
ImmSetCompositionFontW
ImmSetCompositionWindow
ImmSetOpenStatus

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca6834a14117e02d1e28ae4f1cfb5702

Code Sign

32:9c:a9:7f:ee:93:50:49:b3:b2:fe:bc:c8:68:fc:ecCertificate

Extended Key Usages

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

cf:89:3e:2a:57:9d:29:ef:b1:c9:9a:c9:6e:18:8d:2f:a9:ce:97:d4:40:54:b7:45:e1:63:2a:f3:b1:b0:5d:f7Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

comctl32

imm32

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 119KB - Virtual size: 119KB

.data Size: 512B - Virtual size: 376B

.rsrc Size: 6KB - Virtual size: 5KB

32:9c:a9:7f:ee:93:50:49:b3:b2:fe:bc:c8:68:fc:ec
Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

cf:89:3e:2a:57:9d:29:ef:b1:c9:9a:c9:6e:18:8d:2f:a9:ce:97:d4:40:54:b7:45:e1:63:2a:f3:b1:b0:5d:f7
Signer

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 119KB - Virtual size: 119KB

.data
Size: 512B - Virtual size: 376B

.rsrc
Size: 6KB - Virtual size: 5KB