01e8e35421bf2311fe139f1f144d5c64_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

01e8e35421bf2311fe139f1f144d5c64_JaffaCakes118
Size

422KB
MD5

01e8e35421bf2311fe139f1f144d5c64
SHA1

3f34b48bc1f3fd79865d09ab32e4b85e07618b14
SHA256

b78aeb6fbf2df3184d9085abdacf9c3aa03629c7c348d9717b544d1bcd72c933
SHA512

e813b282af8951567312340e5c65c73636c2fa93166143718629ec7504abe9efd0d19fe0947b926bf6632e78ecef66a8daf82df170b848b22a3c418807c89848
SSDEEP

6144:/Q9kIXrueYIYsIW4VAYsOYeCEMFYTrLIqAWHfEFfb3bXw2/FI:/j2rf3cV+cnTgqv8Fbbw2/G

Score

1^/10

Malware Config

Signatures

Files

01e8e35421bf2311fe139f1f144d5c64_JaffaCakes118
.exe windows:5 windows x86 arch:x86

08173f2c44037cd16f22311cd95e3a9b

Code Sign

26:db:7f:a2:4a:14:21:b7:46:ac:00:86:47:ad:bc:9f
Certificate

Issuer

CN=ddddddddddddddddd 4cjkAnmmJJar2LM9txh9IE9 lG2M7BDgitI3cxj5q JaAE9LIf7AEcJmjHdbpsAl3Mv i3yJE6p2l7EjmgiktHK2sBz8B4GclHG nsInpgfzEqa1h58nnv9fzvodJa34ikhH4ny1u9f6xkrLb hrrrxjdK74DB7BhcjD6iFtrEdKpktkGzum8CbHenDL41phy2BrLyFpdc6D3CbCtliKtwyMpwFg63ijlK3 rmFxeJqC H2MKbgBH4vhg5Bqw4mcculp I5J7e6Cpd J1iDo4LBC3Gxg9GL9njlIhzow5gIaeq6vFH7sjGFbtpCpikhJH4MwF5u51AtGKnFjhxeizhwIHjvMFLdk2JFojqMC24nfJMo2vnqfxgBfe6ayGLqJ3yMLAnrf2u5BleqDr74IlApi8Ld1y7ahI92qk4owaLvflC9IjLK2ctgvMtcbjL1AiJ5zuMa3ec4AwA24G8tprc3LMlnj1pDr56fJt8dJ4vIx2jxwajEBAhv6pFbzoAdxjnHoouxBabdzsHvDFac9JCJfm2vCr aowr81wy6hu78lHgEBp7CnGv6CCC3dDs D9sjLr9rH6nnrmAulL76G2k5JyLu9Fl7EBJKd5tF4fDmFAdsGc4ghnAlx71EpGvAHm4w bwA6HlLMGaqgud9fqgqmjM4Dt6nqqMfM2odkA17piLon5A8LndiC7FtrgaKqHCimoElmdCv7xH7oFmplDBqvp8FwInICv6Fiy1fxKbrg7lmaKpAA KJpbcvF 85qhnl 3vKuertgFcoMv7b3cHqqr322BLczHwrfgcrrFJspmFt3wdhdKswhyI1Hpx11fKfEGvvrnHe6m94LGoKI8A1mp 4vGbCwM3q88k5ocukqvlscejjMAGmGp FebaLdoh A4wDCzAoIx312o532Bf8b86qM4o5M13KrEHnn7hGimsrJnw9dxun2kna3yq94CAzi 68JhInkBExxv4bpGmKbut83Ge3cE2IdCwhAnpErj7amHcMrM2aEuGfMIbbnecvm94gxb AnHircuAGzdIfdb1LdbkkM6itknE38b1gGpfwzt Gt2pt 8oDuFi nKJ9yxB72iMrfD3bJagJMrryxdeFba2AqweAxsvz1bljeftB 97nchJHkEkxxpegHCI81I8i25 ikub8hHsH7qvho2vAlng 6ckfgMcnHviq35Lzn hzDe3rCnLpw2HgLuEIEcwmualawjgDBr9j8g1rucHi1rMCHcuktcmr9JvCnfFELM9k57DB4Jj1JvuGej5zByj3LBm24GD7JH7hgxsLsdDLpd5rHdIyavvAfhc1jzhimmeHFG4hu3znzdwanL kruyt4BcfJ5vbpvp246kof7czxAfqIksIi1tI8oxdFo35cA65pjuhxycfsMn8efeiavwuiwstjhKie1lAguAkhrb9vjLgCcaF3myE2aAtoro7BjiKr8kExyvkgo723wid 88EbAw776AHLfwyrajcwl4GcAk5C ynvK4JrxqbajIrpCMJCFxB9GDhK1ICorGfJCmrbdd6fCAud83fqkn5zCiG jul Eb4xybjirnIa 5jhpIhJ7jcGsBdwCDMn87L3IAl2ow3EEq3fk6u5nkoqe3frI2FHwoBGp6d5Eb3FudljKn667Cokrw4D65reBwDg6ogwHrk1tu5mhl qLAGs7kwp7lGekyjpnB2Dz7ayjuMFwFKmFn3w2zF5hgzAx9p1hxoeAcDzAvqhztEc1d 62Lm1Euk5koEcBner549z1pwccMh2AfwFocvdI65Fhr8netvqnne22nLaC9bDAI85qktsj8mncHfC7y5sDI7IrKkkxyDJqndgq9wCLIqt7E4n16AztnqJarqxJkhlFydnMDlAecIrEMK8qo6wlcrifKmnK7LihkK1a43HImCLrelaipL11ElsD38Atzxs51Afeg6bqc27hBCx9MfA2cCrBxe7iqi5jJlDdrHdDu54e2mufMnA4hdhiqCwk6EFpnbf9eafm gygI1rgvxELtwKAkCnuEyfMGxiEeauk bEkiGLaCuMab3dB2JFEiz88tBBpbit83a7r58czL9EffsMaoF2tJyLyaCrdwc5lJ5A3sA4Lo4688asD7HzkiqzaiodaFzCJ8fwK2eAkxmri7MMasnvqLlboDA5d27Cup2F1gcC65z2bHeEMzK8Gk4sbnvxoII7E2E7xKlhhmeyCdrL856pLBl4rnv87cJ3E7zlKFyxiqueLHe9z3GbBqgHMK2Mle I7lc3exbx8i9IhFIvx9Jhy532jEvCfbygdn4uhwmfi1LgIu Bd9J8tgke8HxfsCEJplibspIv93a7IL8tqA9q9rFiDxG7jgxfjJyvbva7DFtbCBmnGrHs 664rr2D F35c4fouhEk3pytlLhu wKCBocq 8o2kyx4BIrHI9J38qv5M7ua3tdlkwBxBc43G7FrAHniFjiyl gjDEpw3KkLvlBpKuDjLA5pHMCC689EK5oowrwmumjKG5qoijLtEfbc7e2MAfI1b6s9Bc8dqI1BKycMLhMEAM1qewM85qyFlC7I34gAeF39h8 hryxBf2Le8BqyAfwbFvjaD6lmLxu6aIw8FFJiqHrrxe466fb48uCDp77BC2LhcA851ky6EIbreJ1bIHAhdJb dfv1HpHxFBcjcMkxbz7x5iAjfJwzI5qGcoEdjq6xbr1CyaF1wzfm g2rG4l64yGLlvqKd4x lHsH31Kw523r2yftFkw4dM3v8 EKz1tse3fkyiGwdm27HtoE9LD8DKirwhtMLLkoq3y3MK9tsfBhIrDDkKknD5it79vhveyL9L8MprsFjzlMungichJL37HLvl58y354J8M4ml3MgDox yzvc1vykfrfIzHLjv ME4d9iEA9Hi1f6BaAaHzAowxwojy1ge 4lyGCHEhyhBEz3ltHAJnAL2FuDHJgvvq3Lc3vFoDz74pvsvoqhpa8G9IJ ca3D8c8KE vJ9y5k5vGzqdig2tJi2G8odDJtzfterbA4LGo47JGKpHk4grM6l7LGn8qLM4Dqa3vFrm66yC9hf8G2sb1xjeBCEngB3q78f9 j3DxkBmBiIjkL2Ktzs89uHyD3iKsfFbd7AwnjbK61oJMHEFzbeBcju1M cCa9qvLGrJe1B8csng4rmAdHbvA1sJzdIdoz6fiIp9Ajq3FmkIfwEMqwp4sJ3toLFA566z1uMe5gbdesJejqviB6xHkGBMxsqzbmkse2efDtcDKs6omhFiJGwCfI2co qKjyeAbd 5bcwBCxJKocBh6g4y841ikMfpw2HI7hxl8gokewFmaoC3BJ6dg2gmC7v G9kvy4orDCu711Ch9evhuoAlpt9wADuMcixlj9yifh8JJ35ttAgGCBw5BCzmMM3Dqneu1nH7LuCflH2292hcowA28uBr3pH29qouz85zrCs44plILHBmwaLjIayD9u7xB8oLlFmqLyKanoA3fdfpM2KvJp9GAv82EAhbMhCsfDLpAAyvBzjsADEMHgogjfe1EIHHi23 DbB92ftgk9LG9Kjp6ndxB6xMs6rft2wo6y48xu8frcowdBd9449alCCm uuyuj59K25dvic4DdJghzFiJLDh5FuuBAAkfL7s86IGyv24Co1hubq2spJ6d6gsejL52a32uitwFC Hjn9dz7Awu2wvGzhEIp4uKHElv2MwIrvc35G7lm8nf8ADyrckf9e17Ajh8rxBiCMtiJvdzmkhk8boz4FBlcBmknIJ8bz3rmdeEG97w2Adg5u AiKzxLGdp86F i9rnwEbcgGer8g J1Mke1im8i1CC9uc6q2FM8BIbuap3345p28h5AA2ruFz439ubiye48Dj5yh2 EEe7Crk3onD6vA4Kgp8cnDsvAngnfkq1wFjbtCqrnEhtce8f81n3s9qM KBifMuGegBc35B 4rrrrrrrrrrrrrrrrrr

Not Before

27/12/2012, 10:49

Not After

31/12/2039, 23:59

Subject

CN=ddddddddddddddddd 4cjkAnmmJJar2LM9txh9IE9 lG2M7BDgitI3cxj5q JaAE9LIf7AEcJmjHdbpsAl3Mv i3yJE6p2l7EjmgiktHK2sBz8B4GclHG nsInpgfzEqa1h58nnv9fzvodJa34ikhH4ny1u9f6xkrLb hrrrxjdK74DB7BhcjD6iFtrEdKpktkGzum8CbHenDL41phy2BrLyFpdc6D3CbCtliKtwyMpwFg63ijlK3 rmFxeJqC H2MKbgBH4vhg5Bqw4mcculp I5J7e6Cpd J1iDo4LBC3Gxg9GL9njlIhzow5gIaeq6vFH7sjGFbtpCpikhJH4MwF5u51AtGKnFjhxeizhwIHjvMFLdk2JFojqMC24nfJMo2vnqfxgBfe6ayGLqJ3yMLAnrf2u5BleqDr74IlApi8Ld1y7ahI92qk4owaLvflC9IjLK2ctgvMtcbjL1AiJ5zuMa3ec4AwA24G8tprc3LMlnj1pDr56fJt8dJ4vIx2jxwajEBAhv6pFbzoAdxjnHoouxBabdzsHvDFac9JCJfm2vCr aowr81wy6hu78lHgEBp7CnGv6CCC3dDs D9sjLr9rH6nnrmAulL76G2k5JyLu9Fl7EBJKd5tF4fDmFAdsGc4ghnAlx71EpGvAHm4w bwA6HlLMGaqgud9fqgqmjM4Dt6nqqMfM2odkA17piLon5A8LndiC7FtrgaKqHCimoElmdCv7xH7oFmplDBqvp8FwInICv6Fiy1fxKbrg7lmaKpAA KJpbcvF 85qhnl 3vKuertgFcoMv7b3cHqqr322BLczHwrfgcrrFJspmFt3wdhdKswhyI1Hpx11fKfEGvvrnHe6m94LGoKI8A1mp 4vGbCwM3q88k5ocukqvlscejjMAGmGp FebaLdoh A4wDCzAoIx312o532Bf8b86qM4o5M13KrEHnn7hGimsrJnw9dxun2kna3yq94CAzi 68JhInkBExxv4bpGmKbut83Ge3cE2IdCwhAnpErj7amHcMrM2aEuGfMIbbnecvm94gxb AnHircuAGzdIfdb1LdbkkM6itknE38b1gGpfwzt Gt2pt 8oDuFi nKJ9yxB72iMrfD3bJagJMrryxdeFba2AqweAxsvz1bljeftB 97nchJHkEkxxpegHCI81I8i25 ikub8hHsH7qvho2vAlng 6ckfgMcnHviq35Lzn hzDe3rCnLpw2HgLuEIEcwmualawjgDBr9j8g1rucHi1rMCHcuktcmr9JvCnfFELM9k57DB4Jj1JvuGej5zByj3LBm24GD7JH7hgxsLsdDLpd5rHdIyavvAfhc1jzhimmeHFG4hu3znzdwanL kruyt4BcfJ5vbpvp246kof7czxAfqIksIi1tI8oxdFo35cA65pjuhxycfsMn8efeiavwuiwstjhKie1lAguAkhrb9vjLgCcaF3myE2aAtoro7BjiKr8kExyvkgo723wid 88EbAw776AHLfwyrajcwl4GcAk5C ynvK4JrxqbajIrpCMJCFxB9GDhK1ICorGfJCmrbdd6fCAud83fqkn5zCiG jul Eb4xybjirnIa 5jhpIhJ7jcGsBdwCDMn87L3IAl2ow3EEq3fk6u5nkoqe3frI2FHwoBGp6d5Eb3FudljKn667Cokrw4D65reBwDg6ogwHrk1tu5mhl qLAGs7kwp7lGekyjpnB2Dz7ayjuMFwFKmFn3w2zF5hgzAx9p1hxoeAcDzAvqhztEc1d 62Lm1Euk5koEcBner549z1pwccMh2AfwFocvdI65Fhr8netvqnne22nLaC9bDAI85qktsj8mncHfC7y5sDI7IrKkkxyDJqndgq9wCLIqt7E4n16AztnqJarqxJkhlFydnMDlAecIrEMK8qo6wlcrifKmnK7LihkK1a43HImCLrelaipL11ElsD38Atzxs51Afeg6bqc27hBCx9MfA2cCrBxe7iqi5jJlDdrHdDu54e2mufMnA4hdhiqCwk6EFpnbf9eafm gygI1rgvxELtwKAkCnuEyfMGxiEeauk bEkiGLaCuMab3dB2JFEiz88tBBpbit83a7r58czL9EffsMaoF2tJyLyaCrdwc5lJ5A3sA4Lo4688asD7HzkiqzaiodaFzCJ8fwK2eAkxmri7MMasnvqLlboDA5d27Cup2F1gcC65z2bHeEMzK8Gk4sbnvxoII7E2E7xKlhhmeyCdrL856pLBl4rnv87cJ3E7zlKFyxiqueLHe9z3GbBqgHMK2Mle I7lc3exbx8i9IhFIvx9Jhy532jEvCfbygdn4uhwmfi1LgIu Bd9J8tgke8HxfsCEJplibspIv93a7IL8tqA9q9rFiDxG7jgxfjJyvbva7DFtbCBmnGrHs 664rr2D F35c4fouhEk3pytlLhu wKCBocq 8o2kyx4BIrHI9J38qv5M7ua3tdlkwBxBc43G7FrAHniFjiyl gjDEpw3KkLvlBpKuDjLA5pHMCC689EK5oowrwmumjKG5qoijLtEfbc7e2MAfI1b6s9Bc8dqI1BKycMLhMEAM1qewM85qyFlC7I34gAeF39h8 hryxBf2Le8BqyAfwbFvjaD6lmLxu6aIw8FFJiqHrrxe466fb48uCDp77BC2LhcA851ky6EIbreJ1bIHAhdJb dfv1HpHxFBcjcMkxbz7x5iAjfJwzI5qGcoEdjq6xbr1CyaF1wzfm g2rG4l64yGLlvqKd4x lHsH31Kw523r2yftFkw4dM3v8 EKz1tse3fkyiGwdm27HtoE9LD8DKirwhtMLLkoq3y3MK9tsfBhIrDDkKknD5it79vhveyL9L8MprsFjzlMungichJL37HLvl58y354J8M4ml3MgDox yzvc1vykfrfIzHLjv ME4d9iEA9Hi1f6BaAaHzAowxwojy1ge 4lyGCHEhyhBEz3ltHAJnAL2FuDHJgvvq3Lc3vFoDz74pvsvoqhpa8G9IJ ca3D8c8KE vJ9y5k5vGzqdig2tJi2G8odDJtzfterbA4LGo47JGKpHk4grM6l7LGn8qLM4Dqa3vFrm66yC9hf8G2sb1xjeBCEngB3q78f9 j3DxkBmBiIjkL2Ktzs89uHyD3iKsfFbd7AwnjbK61oJMHEFzbeBcju1M cCa9qvLGrJe1B8csng4rmAdHbvA1sJzdIdoz6fiIp9Ajq3FmkIfwEMqwp4sJ3toLFA566z1uMe5gbdesJejqviB6xHkGBMxsqzbmkse2efDtcDKs6omhFiJGwCfI2co qKjyeAbd 5bcwBCxJKocBh6g4y841ikMfpw2HI7hxl8gokewFmaoC3BJ6dg2gmC7v G9kvy4orDCu711Ch9evhuoAlpt9wADuMcixlj9yifh8JJ35ttAgGCBw5BCzmMM3Dqneu1nH7LuCflH2292hcowA28uBr3pH29qouz85zrCs44plILHBmwaLjIayD9u7xB8oLlFmqLyKanoA3fdfpM2KvJp9GAv82EAhbMhCsfDLpAAyvBzjsADEMHgogjfe1EIHHi23 DbB92ftgk9LG9Kjp6ndxB6xMs6rft2wo6y48xu8frcowdBd9449alCCm uuyuj59K25dvic4DdJghzFiJLDh5FuuBAAkfL7s86IGyv24Co1hubq2spJ6d6gsejL52a32uitwFC Hjn9dz7Awu2wvGzhEIp4uKHElv2MwIrvc35G7lm8nf8ADyrckf9e17Ajh8rxBiCMtiJvdzmkhk8boz4FBlcBmknIJ8bz3rmdeEG97w2Adg5u AiKzxLGdp86F i9rnwEbcgGer8g J1Mke1im8i1CC9uc6q2FM8BIbuap3345p28h5AA2ruFz439ubiye48Dj5yh2 EEe7Crk3onD6vA4Kgp8cnDsvAngnfkq1wFjbtCqrnEhtce8f81n3s9qM KBifMuGegBc35B 4rrrrrrrrrrrrrrrrrr

Extended Key Usages

ExtKeyUsageCodeSigning

3f:b7:5f:dd:ed:c8:23:d3:8a:1b:51:5e:18:da:8e:35:d3:fd:67:da
Signer

Actual PE Digest

3f:b7:5f:dd:ed:c8:23:d3:8a:1b:51:5e:18:da:8e:35:d3:fd:67:da

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

user32

GetDC
GetDlgItem
GetDlgItemTextA
GetParent
GetSystemMetrics
GetWindowLongA
GetWindowRect
IsDlgButtonChecked
LoadStringA
MessageBeep
EnableWindow
MsgWaitForMultipleObjects
PeekMessageA
PostMessageA
ReleaseDC
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetWindowLongA
ShowWindow
wsprintfA
CheckRadioButton
CheckDlgButton
CharPrevA
CharNextA
CallWindowProcA
PostQuitMessage
DefWindowProcA
LoadCursorA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
LoadIconA
MessageBoxA

gdi32

DeleteEnhMetaFile
GetObjectA
GetDeviceCaps
DeleteObject
CreateFontIndirectA
CreateEnhMetaFileA
Rectangle
MoveToEx
LineTo
CloseEnhMetaFile
GetStockObject

advapi32

RegOpenKeyW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

m3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m2
Size: 348KB - Virtual size: 347KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

08173f2c44037cd16f22311cd95e3a9b

Code Sign

26:db:7f:a2:4a:14:21:b7:46:ac:00:86:47:ad:bc:9fCertificate

Extended Key Usages

3f:b7:5f:dd:ed:c8:23:d3:8a:1b:51:5e:18:da:8e:35:d3:fd:67:daSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 4KB - Virtual size: 3KB

m3 Size: 512B - Virtual size: 100B

m2 Size: 348KB - Virtual size: 347KB

.data Size: 2KB - Virtual size: 2KB

.data2 Size: 1KB - Virtual size: 1KB

.rsrc Size: 41KB - Virtual size: 40KB

26:db:7f:a2:4a:14:21:b7:46:ac:00:86:47:ad:bc:9f
Certificate

3f:b7:5f:dd:ed:c8:23:d3:8a:1b:51:5e:18:da:8e:35:d3:fd:67:da
Signer

.text
Size: 4KB - Virtual size: 3KB

m3
Size: 512B - Virtual size: 100B

m2
Size: 348KB - Virtual size: 347KB

.data
Size: 2KB - Virtual size: 2KB

.data2
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 41KB - Virtual size: 40KB