052901b5d3e4d605dff12dae097d2f13_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

052901b5d3e4d605dff12dae097d2f13_JaffaCakes118
Size

93KB
MD5

052901b5d3e4d605dff12dae097d2f13
SHA1

1b6d5afe37ce5fbb4b769d7d56e0ac876d6ede95
SHA256

e822917f79f7e22e15ab6d0e6d35df04a6f23cad9a8e829d27e29b82e925b13a
SHA512

d6199d643d9e37ab16d1dd1e4b36a0a7c0674b8e219a626cb511869f5e45d5d7214fa322543668b49a5c656fed2b7e0e70aa3b78dbcaf174915a150cf58ab6ae
SSDEEP

1536:S/zWKm7V1lpPszzxDgDHDqDHTCrP3YvwT6:gaflpPszpijsHMwvwG

Score

1^/10

Malware Config

Signatures

Files

052901b5d3e4d605dff12dae097d2f13_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ce721ec1c172d5ac158ad8a7421043c1

Code Sign

06:b4:4f:2b:7e:71:89:91:48:f2:bd:37:39:01:c0:a8
Certificate

Issuer

CN=hhhhhhhhhhhhhhhhhhhhh skLIp2uzhfIajFEML46o Knd82lx9h79aFE7iBH8qLDaItgyhIs mIpMIJgn46ci3KC3rM8eM7FcA72cLfukkaJHxejjqbyehxdwIjk1KtJ5hGgcGE74bjrmHMfrAFlpblo3okxos6 2in7LwiCdki4q42q71maHw7q66Fnp559569kLvuiE1IjEFssG73hiyIentfGMCms19Mp8j1jIcuiC57B4upuaLAvLlgddCgpK9lcgLgnngKhA9rdxpdj4x4qigjmCnvcqs6a9AwIEsGk16LFJi6q2u2AktCp fkh63slov2q9 bzEAAseMmIJt8pzy6Gq6w A2CLj7AyoiCsqzuewkIfLyj4sfj6iluplnwzBrbH5ejlgF1nK2 LoJqhczvGbAEcI2fKgtMavxx3GGFbywABsujIJFtBw8tMEuc9kqloAxusbvcqpyxg1pJ 9o4LFjHfrMb57tubHuqJGcLhJsMfF78songzpgfnj3uMLtkvwBdMtEtngMHkhh6zLq3EEJGlk7cwsHq6ogL9x5hvLsonefbAlieBc c86FqgHaz84qK57FhnDAG3d1gzG6p3yqykMIivq4zyCou9r5mpnvCEpfknLCxKujjpaDbpohiK2ero AuaoLBeBf3nGBnIHsbsA3IbgCoAKanj855 caeGlz3 lHLL96a 2zooapA2kuh2KqE8asydkL5 M8sLyvh1camjGjuLJJ4Ld7eeKcqMc fqpBDk8DxLg3smuyluJl6unKwMIiwrF wu9KettxfbLMAtgbjoqkKo8nbriajoy2iGIi654Ef6bdbKpjlI1H7ueqJetcxp7yArM1rsdH56cHs5acttnxvLhzpLuFBsCu 2or83osFBc3z3crAHxpz4oFr9tkMDeH6atb5225K8qy7qdxqrtH5o7LnHEa8q5ggijf6aM6iJyh4GwxpA2GbxnloasrGggaDuGsEeteCLuj4zudDECd1aG5AyfxfBjdrLG99pwodjju1cI3MqixzfKDI9m yikxvcJhu64krFoC 56beJejDvGdfDu77AneC9cI3taybgvteEjfpejzEa9sBKwMAmothI1qrr8vvf33b5FgLnuGxprrljx2wHa2q4MLw8tKaCb yu8dqELGmlwmLxIsblHsh1lweJ96kcpvaa33BasmgMxav6v4ioiqwuu6bcICy nw23jL3LtK6n4jgvc3jwI2fHL12whouzb89 KglAfMEjGe32aBI1JCbv4myJp xcMizxdAfrE5okb1q1EC7BFyhynej7dooDDg4m2b85klhl8gbHqwp aCxsny2lHHvnxKfHhIvsgpc1hdlM6Aoy6rMqggL7Md2Akg 3wMHnD4hG3k5eg9zx67 z79urtaqy1s6MCw4I9IkpGeHvv4xyB BKaiqgJ1v6ny3hnliD1lvu9G f1HiFzoj315Akgk6myzEzDGirrB5d2tIf7gfhj goKmkkth8o23iKd1oFyDc69hjrobswGcBFhyBjGjr6gMK91gj1zE4Ehnt7kx2msKnHtGc4vDycgjavwg21pv4EA4sB11CtsCIckfilGgKkCEBlF9iHbvKgc2Mp2s inzGBscEt3J5917f4y BzfBfAwnfEKs1mnFxvL iAI8uak6zsb5hmmzaafyAA5bMAsccsspKpFwn2FEMHC2jHyKi9M9CuAbnhofKBjgv4mbk6CyaEKq bew4MCKngDhlq47zAs7txBDjw5b5ovt5n45GwaKla3tg65Kjpf2il FpgmLwDKFGdGhcfKh9idJECvJusH642qH58Hd2nMwsDbJBq73D26M9GLj7CxEd21pkcLi5bF6hBxMiIaK5cFd8uGaunIlz fhmdloDD3xkgIzKd44rw4Ais2llxzhrKzeHy96DAa85MoGouF4hxcCiepx8KJM34fyqK81FrB8wrGzLLL4l97ehofJrfMp9rJsEMBy 6lyEgihlhHKG5gBihBwHsJIAsFs4eEg I5EGfa3HDu5p8ybClE5JLh4pizDL5Mn7KIbCcyCoibnHjamew73jdtyx8r8nF9IIICgA1LGpHejJrnL9luisB9CGo34FK7frsEDbfffqM7rDrgICqMJmcrD8 iFdaGivqprHlGLoL6sJi8IbKfL5CJe4gIstb4zeiqC6luc778zADtL76kfnCopFfpDlIsBD8C 3roeuql 8dJmuv4FcA2pi4Arfve65cowfBnMe8z2oAmf3 nnGojdHaoLyrDbcIpK5ztEACzncx7aMpfj4KFADfHkLmKbjlbE13bDKgbB2F73Ku7ale13ofhnd6jD6wwpoFCqF453sqd4s8rE9ezej34evayA3usqud2Jdy6Jgpab7epubirGL1uh95ft5qqztL3mD2k9yeFM e1hmwF8zt77zBztbF7bDfnjAGmsgEm d2 fuafvsLfy5336yMzDkatAiKwiC7i679sa7C1mywqg8grdokArldMcE nHi3EpdiDkd6Dqw1AAzrjGmteI14rvc1Lbez9xqceBFrGdpkvhIgBp7CLpBEes6f3Bqn6bdDdqh2Kb7JrE8laIuc6e7GdxM5IGB37MsntolH2I71jI7qelHmgsJBw1M33Dldg3JBw4qCy3LowiCb1eaHncrv8ydMK87o9gIKxJA6GcBFudKEgtkE52BAwwjhioL8mhbJv3CBMxCoe8eeImzs2cKvC6FIkcg4aq2jd1Cs1lndrDkhjIumlpDiKydsCchouxn5Luh2tBcdCDpk5 K13Ekyz3uisbcJm2x2tynqDAv3DCvtdo Aq7fHp3MmnsG32Ab9y 45kKmo2w89AqFCK3v xurc2hAl7npih75nurIobjgee8KaAcjoue9rddAAg6kzb4EMwcpgJcJsFtjgAfuCDD rvxdKGvi62tAv5pJ6D9lpb6onDygn5I48dtGxbuiHM7Li328kJzn2LBya14vBfIdqh1sMdy9bq2d4ithztyn7lm2nrwviCvwB8jFL9ADjra9g41p dowd8BCuvDopyqzDst1FKtbK7zyaoHCq4lihxeMkALiIp348CBCIeEyn4mjtax7pun jbk1EaKn25n4bk4Iu83DyofxsAz2M8dwsdlqECwFEc9GICGnx4sgv71fKDt6gvIBC4vDjsDif2ptDqjphLcinu GaB46Iv dtFmHpFK1Ds 4z3Evsj5f3av4qxDAGkfEftodMe2ngL6xsI gMLl rAjg5eG MfqyBemsuAJBlga2c3vGBnkob5erybAH6lp5bberkmMtjKHJ33lkssd5ryIixL4b5x4A24DdrEr3M xgy8a8sDud4Le1MJ zgzuuFz7howoCxfip8xoHmsczst uqh2lAE7mq9M EJAzvazfuopwsjIq8L2DCkA3x6HIrvqxkDmn33i9vnKcc6ezM6MAvHb1AKlbhks5dtd4xqMDFp8pwsHxfgepsqq1r24qHEKGwFdf5aa8if a9r8moK251IB61ew14tcxDcDuw4qdpgIGDCcsktDBDozrJGMumnEoM8ygnwpo55977jAHI1EIIwbA1bbB9e34mlLLniujF6mjfr6tGlqn15DvF1atBDDonJB444mgfMtqGrBbJf6dnn417deid4e gCbDoH5bMn2J2zqvs4B13mlAmfdMlMkFo54pnywnuFHHAy8EIHqMH6 loLrBAAff7cKLthGGBHfgGkqI5L9AwAnAE6dvMHGyztm3uEeoDq87mEKIM3DfymkzrMManC z2GmaLEz29J9wjFr6JonzhcMr 4xwEcflIqwh68BmcgH1Ea1u utqtso3lI6GA22kc2JKHmyuFm6Lls4dgbfbi8Hc4diod1B3Kavrd859xsaFtlHMmdMdoAAgHbyF t6KGLuryqim p9oikCd5inLy5LB41461Hiz3yKLrKqBE9fvtiKAhCImw5Fs7elH kkkkkkkkkkkkkkkk

Not Before

30/12/2012, 07:18

Not After

31/12/2039, 23:59

Subject

CN=hhhhhhhhhhhhhhhhhhhhh skLIp2uzhfIajFEML46o Knd82lx9h79aFE7iBH8qLDaItgyhIs mIpMIJgn46ci3KC3rM8eM7FcA72cLfukkaJHxejjqbyehxdwIjk1KtJ5hGgcGE74bjrmHMfrAFlpblo3okxos6 2in7LwiCdki4q42q71maHw7q66Fnp559569kLvuiE1IjEFssG73hiyIentfGMCms19Mp8j1jIcuiC57B4upuaLAvLlgddCgpK9lcgLgnngKhA9rdxpdj4x4qigjmCnvcqs6a9AwIEsGk16LFJi6q2u2AktCp fkh63slov2q9 bzEAAseMmIJt8pzy6Gq6w A2CLj7AyoiCsqzuewkIfLyj4sfj6iluplnwzBrbH5ejlgF1nK2 LoJqhczvGbAEcI2fKgtMavxx3GGFbywABsujIJFtBw8tMEuc9kqloAxusbvcqpyxg1pJ 9o4LFjHfrMb57tubHuqJGcLhJsMfF78songzpgfnj3uMLtkvwBdMtEtngMHkhh6zLq3EEJGlk7cwsHq6ogL9x5hvLsonefbAlieBc c86FqgHaz84qK57FhnDAG3d1gzG6p3yqykMIivq4zyCou9r5mpnvCEpfknLCxKujjpaDbpohiK2ero AuaoLBeBf3nGBnIHsbsA3IbgCoAKanj855 caeGlz3 lHLL96a 2zooapA2kuh2KqE8asydkL5 M8sLyvh1camjGjuLJJ4Ld7eeKcqMc fqpBDk8DxLg3smuyluJl6unKwMIiwrF wu9KettxfbLMAtgbjoqkKo8nbriajoy2iGIi654Ef6bdbKpjlI1H7ueqJetcxp7yArM1rsdH56cHs5acttnxvLhzpLuFBsCu 2or83osFBc3z3crAHxpz4oFr9tkMDeH6atb5225K8qy7qdxqrtH5o7LnHEa8q5ggijf6aM6iJyh4GwxpA2GbxnloasrGggaDuGsEeteCLuj4zudDECd1aG5AyfxfBjdrLG99pwodjju1cI3MqixzfKDI9m yikxvcJhu64krFoC 56beJejDvGdfDu77AneC9cI3taybgvteEjfpejzEa9sBKwMAmothI1qrr8vvf33b5FgLnuGxprrljx2wHa2q4MLw8tKaCb yu8dqELGmlwmLxIsblHsh1lweJ96kcpvaa33BasmgMxav6v4ioiqwuu6bcICy nw23jL3LtK6n4jgvc3jwI2fHL12whouzb89 KglAfMEjGe32aBI1JCbv4myJp xcMizxdAfrE5okb1q1EC7BFyhynej7dooDDg4m2b85klhl8gbHqwp aCxsny2lHHvnxKfHhIvsgpc1hdlM6Aoy6rMqggL7Md2Akg 3wMHnD4hG3k5eg9zx67 z79urtaqy1s6MCw4I9IkpGeHvv4xyB BKaiqgJ1v6ny3hnliD1lvu9G f1HiFzoj315Akgk6myzEzDGirrB5d2tIf7gfhj goKmkkth8o23iKd1oFyDc69hjrobswGcBFhyBjGjr6gMK91gj1zE4Ehnt7kx2msKnHtGc4vDycgjavwg21pv4EA4sB11CtsCIckfilGgKkCEBlF9iHbvKgc2Mp2s inzGBscEt3J5917f4y BzfBfAwnfEKs1mnFxvL iAI8uak6zsb5hmmzaafyAA5bMAsccsspKpFwn2FEMHC2jHyKi9M9CuAbnhofKBjgv4mbk6CyaEKq bew4MCKngDhlq47zAs7txBDjw5b5ovt5n45GwaKla3tg65Kjpf2il FpgmLwDKFGdGhcfKh9idJECvJusH642qH58Hd2nMwsDbJBq73D26M9GLj7CxEd21pkcLi5bF6hBxMiIaK5cFd8uGaunIlz fhmdloDD3xkgIzKd44rw4Ais2llxzhrKzeHy96DAa85MoGouF4hxcCiepx8KJM34fyqK81FrB8wrGzLLL4l97ehofJrfMp9rJsEMBy 6lyEgihlhHKG5gBihBwHsJIAsFs4eEg I5EGfa3HDu5p8ybClE5JLh4pizDL5Mn7KIbCcyCoibnHjamew73jdtyx8r8nF9IIICgA1LGpHejJrnL9luisB9CGo34FK7frsEDbfffqM7rDrgICqMJmcrD8 iFdaGivqprHlGLoL6sJi8IbKfL5CJe4gIstb4zeiqC6luc778zADtL76kfnCopFfpDlIsBD8C 3roeuql 8dJmuv4FcA2pi4Arfve65cowfBnMe8z2oAmf3 nnGojdHaoLyrDbcIpK5ztEACzncx7aMpfj4KFADfHkLmKbjlbE13bDKgbB2F73Ku7ale13ofhnd6jD6wwpoFCqF453sqd4s8rE9ezej34evayA3usqud2Jdy6Jgpab7epubirGL1uh95ft5qqztL3mD2k9yeFM e1hmwF8zt77zBztbF7bDfnjAGmsgEm d2 fuafvsLfy5336yMzDkatAiKwiC7i679sa7C1mywqg8grdokArldMcE nHi3EpdiDkd6Dqw1AAzrjGmteI14rvc1Lbez9xqceBFrGdpkvhIgBp7CLpBEes6f3Bqn6bdDdqh2Kb7JrE8laIuc6e7GdxM5IGB37MsntolH2I71jI7qelHmgsJBw1M33Dldg3JBw4qCy3LowiCb1eaHncrv8ydMK87o9gIKxJA6GcBFudKEgtkE52BAwwjhioL8mhbJv3CBMxCoe8eeImzs2cKvC6FIkcg4aq2jd1Cs1lndrDkhjIumlpDiKydsCchouxn5Luh2tBcdCDpk5 K13Ekyz3uisbcJm2x2tynqDAv3DCvtdo Aq7fHp3MmnsG32Ab9y 45kKmo2w89AqFCK3v xurc2hAl7npih75nurIobjgee8KaAcjoue9rddAAg6kzb4EMwcpgJcJsFtjgAfuCDD rvxdKGvi62tAv5pJ6D9lpb6onDygn5I48dtGxbuiHM7Li328kJzn2LBya14vBfIdqh1sMdy9bq2d4ithztyn7lm2nrwviCvwB8jFL9ADjra9g41p dowd8BCuvDopyqzDst1FKtbK7zyaoHCq4lihxeMkALiIp348CBCIeEyn4mjtax7pun jbk1EaKn25n4bk4Iu83DyofxsAz2M8dwsdlqECwFEc9GICGnx4sgv71fKDt6gvIBC4vDjsDif2ptDqjphLcinu GaB46Iv dtFmHpFK1Ds 4z3Evsj5f3av4qxDAGkfEftodMe2ngL6xsI gMLl rAjg5eG MfqyBemsuAJBlga2c3vGBnkob5erybAH6lp5bberkmMtjKHJ33lkssd5ryIixL4b5x4A24DdrEr3M xgy8a8sDud4Le1MJ zgzuuFz7howoCxfip8xoHmsczst uqh2lAE7mq9M EJAzvazfuopwsjIq8L2DCkA3x6HIrvqxkDmn33i9vnKcc6ezM6MAvHb1AKlbhks5dtd4xqMDFp8pwsHxfgepsqq1r24qHEKGwFdf5aa8if a9r8moK251IB61ew14tcxDcDuw4qdpgIGDCcsktDBDozrJGMumnEoM8ygnwpo55977jAHI1EIIwbA1bbB9e34mlLLniujF6mjfr6tGlqn15DvF1atBDDonJB444mgfMtqGrBbJf6dnn417deid4e gCbDoH5bMn2J2zqvs4B13mlAmfdMlMkFo54pnywnuFHHAy8EIHqMH6 loLrBAAff7cKLthGGBHfgGkqI5L9AwAnAE6dvMHGyztm3uEeoDq87mEKIM3DfymkzrMManC z2GmaLEz29J9wjFr6JonzhcMr 4xwEcflIqwh68BmcgH1Ea1u utqtso3lI6GA22kc2JKHmyuFm6Lls4dgbfbi8Hc4diod1B3Kavrd859xsaFtlHMmdMdoAAgHbyF t6KGLuryqim p9oikCd5inLy5LB41461Hiz3yKLrKqBE9fvtiKAhCImw5Fs7elH kkkkkkkkkkkkkkkk

Extended Key Usages

ExtKeyUsageCodeSigning

e9:61:2d:20:68:4f:97:c8:7a:70:bd:9e:09:3f:87:32:fd:77:cb:9d
Signer

Actual PE Digest

e9:61:2d:20:68:4f:97:c8:7a:70:bd:9e:09:3f:87:32:fd:77:cb:9d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
VirtualAllocEx
CloseHandle
CreateEventW
CreateFileMappingW
CreateMutexW
CreateProcessW
CreateThread
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetExitCodeThread
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcessHeap
GetSystemDirectoryW
LoadLibraryA
GetTickCount
GetVersionExW
HeapAlloc
HeapFree
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
MapViewOfFile
OpenEventW
OpenFileMappingW
QueryPerformanceCounter
ReleaseMutex
SetEvent
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TerminateThread
UnhandledExceptionFilter
UnmapViewOfFile
WaitForMultipleObjects
WaitForSingleObject
lstrcpyW
GetSystemTimeAsFileTime
GetProcAddress

gdi32

GetStockObject

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ce721ec1c172d5ac158ad8a7421043c1

Code Sign

06:b4:4f:2b:7e:71:89:91:48:f2:bd:37:39:01:c0:a8Certificate

Extended Key Usages

e9:61:2d:20:68:4f:97:c8:7a:70:bd:9e:09:3f:87:32:fd:77:cb:9dSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

Sections

.text Size: 24KB - Virtual size: 23KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 42KB - Virtual size: 42KB

06:b4:4f:2b:7e:71:89:91:48:f2:bd:37:39:01:c0:a8
Certificate

e9:61:2d:20:68:4f:97:c8:7a:70:bd:9e:09:3f:87:32:fd:77:cb:9d
Signer

.text
Size: 24KB - Virtual size: 23KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 42KB - Virtual size: 42KB