05fa1c2c671fd09eb0a884592d549703_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

05fa1c2c671fd09eb0a884592d549703_JaffaCakes118
Size

338KB
MD5

05fa1c2c671fd09eb0a884592d549703
SHA1

f7625965c79e7693ce824a683ef6d6903bb78ba1
SHA256

c5bac326ca61cc69cc49009c296fdc6e5782f9e5074033c51138c4b334e1a24e
SHA512

bbf4fb7dd428ea95e6f3f539307ec2ff04504b86e6c3b48574f90785123e598d5bde5b119ff06645eba5ed1514bac1d6a256bc7f65891725878a525f63bf9c1c
SSDEEP

6144:uWG53ndCM8GHAXlGCe9hITDUHOo3J6ukp5u90MYq+Zd91uP3bK:hu3kBwA14uechu+n8PO

Score

1^/10

Malware Config

Signatures

Files

05fa1c2c671fd09eb0a884592d549703_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cb3a7103c0c0bc9caee4c671cc731ae5

Code Sign

7a:26:dd:de:f9:66:f5:6e:b5:1f:f1:25:bb:96:c3:9b
Certificate

Issuer

CN=bbbbbbbbbbbbbbbbbbbbbbbbbbbbbb aiLL BrGz9jp4plh1iueL8dKI7ycHC7iKKgr9F29Bs62tnmyDBCMfo7yk5 K7K6b7lcxua1Fcid8brfGyzdDzMmwtDEBq8hsyrgy3rttoy2CxEhsyknC9zAkt1KggzLjCxKAxqIez6uemu2F5y7q8fGImf5IFp6fIAx8HF9s9Gnavkm CJDcboglL73cCuwungHafhjoHlae2 JeJL14DeE44oF8Ez2ar48wbK12iCEcBHfAMMaI6GadlKBfoAEy3K4cbr946wiA8adeKo4L9wzrb1JCg6IhyK FMGutweDlxEFkGdaa5caDeEkpCfnG4jrgssj8Bu 8HxnEBskr7mFv61CvizgiynfqjlrCCemufyaq mvy2fnKGmeeG4zpB5HcIgLAA7KJKGuCH4kg2bl8cxFrFykib3EL3jHiH39I7I GsksbxEw4v6du8CCmLwubCMBu1m7fesFKsEaj8B1rrcc9yv3Bmtsm5vbwMIm15x1bdby ayAngKr HDB16x G HHI6AinfArDAuwJFcinhwFkb8kdF8AkmeqdEGv6aj326sGliHAaE45M4l8z8IbEIkfHalobmjpqcmJmuHdA2rgdFc48LLurJECK5Bpcq1u qqg93o4tG2c6xhlcz1e7cI8zhmpvnv2bFAnziD31jLsaCJ7Anmu93DJzevve5xhkM2uCnyavelq75j7ze4g6pquxbHcdw8uHiAH7wG7MfKxkogGEJakC78D7xiG4sxroFiq3FCe G45x8u7BBEI2ww2Kf9Ebz7As156de27GK1Gtjbkd5oD3f5IGzDhH3yf8ADMCrJynbd5dCvwgyz8656H4tAtHB5FxanG4sLyxDszBJwgcy287unoau6sECcb6K2bztks7L3yH3qA19si9zD83r3g9Jl39gdx8i336n8DbqA4JlEFaxDwzJzc9LcjHle1uavtIz3KHk Bon86LrrA4LoDemBobJGDjBxD5xg rEAdoM4DhBGwqm9nr7ai7Jzh5CG83bbhyn8jn5iElEjpE9v f1HEJLdAzMh3laI6ynEzlvGzek4CGhd4gFHd9DwaDDnI rqD KEmF9fLBgBiI1d8rbGyum172j6CCL 16cDttAhzso9ycEGcFdhwlhd9d5MjHFvcLFm8GIlDoKJ4cMBbHxugKr7u9hyFdLADydc7H2wBaJoepaLkFpBwaBJrdqAlfsD3kez79gE3gyfsIM3zoh fzppsGlA6sf8un tDodmBy2d52K6gKek5mKk4LxGgKnr5JqBKkE4dbxmC7bey7D2m56GutlI3zM9C6FiBAJ31Gih4lrAsxvwc wy1she3wt1Cb929BIExmd93LerB38eGmujIlwb2C9zEFGmMFpI16ilbmw2MnEMq55LDwIA9jfnpaFa7jBm33Lucb7J4e3dFGh8 AC6MMGoM37Mx9GmCEzvxbMIz7nA29jkyGF3hinbFDH bHph3mtCLz9HFDA xxIklExCBt4Ajc4j8KCgAK8vKyifcxpkpkyrn zIeLk 4GvB19amndb 439CDDIB52khnFtLnFxcIK3k28 zwa3tKdALfcJr9Gpck7axi5DDlh8Ata DGnd5AI78m7rt5ffsnAFmv45HayMJ2yEJs28L19JECk77nJJtKGH4z8sjJglBp6H3f7kt78aizwFrp4hmcH6i6x5wLs9771Crz3JpkCvw4nxehfhb4JkcDkErsAjuxMvDnw7xf2BouB6Gabr8Mig CC3w9EenqtBpr5Bebl1k6eJfI6meDb2fiAxlAvmD6HBmdxfAt t5l7y73HobKMgxopfd61dd1juDI7fwxzKHvMa95oaj6Ca2nqim jzzM ChAKA5nFGlCA7JrgLiqlJwbrqL99bK zJq7mwd4zGDdCkqInAxBrg8mzoqzw56mqJod7nace77seJtinLxMotju9Errb aaaaaaaaaaaaaaaaaaaaaaa

Not Before

08/01/2013, 17:40

Not After

31/12/2039, 23:59

Subject

CN=bbbbbbbbbbbbbbbbbbbbbbbbbbbbbb aiLL BrGz9jp4plh1iueL8dKI7ycHC7iKKgr9F29Bs62tnmyDBCMfo7yk5 K7K6b7lcxua1Fcid8brfGyzdDzMmwtDEBq8hsyrgy3rttoy2CxEhsyknC9zAkt1KggzLjCxKAxqIez6uemu2F5y7q8fGImf5IFp6fIAx8HF9s9Gnavkm CJDcboglL73cCuwungHafhjoHlae2 JeJL14DeE44oF8Ez2ar48wbK12iCEcBHfAMMaI6GadlKBfoAEy3K4cbr946wiA8adeKo4L9wzrb1JCg6IhyK FMGutweDlxEFkGdaa5caDeEkpCfnG4jrgssj8Bu 8HxnEBskr7mFv61CvizgiynfqjlrCCemufyaq mvy2fnKGmeeG4zpB5HcIgLAA7KJKGuCH4kg2bl8cxFrFykib3EL3jHiH39I7I GsksbxEw4v6du8CCmLwubCMBu1m7fesFKsEaj8B1rrcc9yv3Bmtsm5vbwMIm15x1bdby ayAngKr HDB16x G HHI6AinfArDAuwJFcinhwFkb8kdF8AkmeqdEGv6aj326sGliHAaE45M4l8z8IbEIkfHalobmjpqcmJmuHdA2rgdFc48LLurJECK5Bpcq1u qqg93o4tG2c6xhlcz1e7cI8zhmpvnv2bFAnziD31jLsaCJ7Anmu93DJzevve5xhkM2uCnyavelq75j7ze4g6pquxbHcdw8uHiAH7wG7MfKxkogGEJakC78D7xiG4sxroFiq3FCe G45x8u7BBEI2ww2Kf9Ebz7As156de27GK1Gtjbkd5oD3f5IGzDhH3yf8ADMCrJynbd5dCvwgyz8656H4tAtHB5FxanG4sLyxDszBJwgcy287unoau6sECcb6K2bztks7L3yH3qA19si9zD83r3g9Jl39gdx8i336n8DbqA4JlEFaxDwzJzc9LcjHle1uavtIz3KHk Bon86LrrA4LoDemBobJGDjBxD5xg rEAdoM4DhBGwqm9nr7ai7Jzh5CG83bbhyn8jn5iElEjpE9v f1HEJLdAzMh3laI6ynEzlvGzek4CGhd4gFHd9DwaDDnI rqD KEmF9fLBgBiI1d8rbGyum172j6CCL 16cDttAhzso9ycEGcFdhwlhd9d5MjHFvcLFm8GIlDoKJ4cMBbHxugKr7u9hyFdLADydc7H2wBaJoepaLkFpBwaBJrdqAlfsD3kez79gE3gyfsIM3zoh fzppsGlA6sf8un tDodmBy2d52K6gKek5mKk4LxGgKnr5JqBKkE4dbxmC7bey7D2m56GutlI3zM9C6FiBAJ31Gih4lrAsxvwc wy1she3wt1Cb929BIExmd93LerB38eGmujIlwb2C9zEFGmMFpI16ilbmw2MnEMq55LDwIA9jfnpaFa7jBm33Lucb7J4e3dFGh8 AC6MMGoM37Mx9GmCEzvxbMIz7nA29jkyGF3hinbFDH bHph3mtCLz9HFDA xxIklExCBt4Ajc4j8KCgAK8vKyifcxpkpkyrn zIeLk 4GvB19amndb 439CDDIB52khnFtLnFxcIK3k28 zwa3tKdALfcJr9Gpck7axi5DDlh8Ata DGnd5AI78m7rt5ffsnAFmv45HayMJ2yEJs28L19JECk77nJJtKGH4z8sjJglBp6H3f7kt78aizwFrp4hmcH6i6x5wLs9771Crz3JpkCvw4nxehfhb4JkcDkErsAjuxMvDnw7xf2BouB6Gabr8Mig CC3w9EenqtBpr5Bebl1k6eJfI6meDb2fiAxlAvmD6HBmdxfAt t5l7y73HobKMgxopfd61dd1juDI7fwxzKHvMa95oaj6Ca2nqim jzzM ChAKA5nFGlCA7JrgLiqlJwbrqL99bK zJq7mwd4zGDdCkqInAxBrg8mzoqzw56mqJod7nace77seJtinLxMotju9Errb aaaaaaaaaaaaaaaaaaaaaaa

Extended Key Usages

ExtKeyUsageCodeSigning

0e:29:e5:36:02:30:50:f9:d5:00:72:8c:a1:bf:24:44:11:e4:17:0e
Signer

Actual PE Digest

0e:29:e5:36:02:30:50:f9:d5:00:72:8c:a1:bf:24:44:11:e4:17:0e

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryExW
ReadFile
VirtualAllocEx
CloseHandle
CopyFileW
CreateFileW
CreateProcessW
DeleteFileW
ExpandEnvironmentStringsW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
QueryPerformanceCounter
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW

user32

LoadCursorA
RegisterClassExA
LoadIconA
GetSysColor

msvcrt

memset
_XcptFilter
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_ftol
_initterm
_ltow
_wcslwr
_wfopen
_wfullpath
_wsplitpath
exit
fclose
floor
fwprintf
swprintf
wcsncpy
wcsstr

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

m13
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m12
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m11
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m10
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m9
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m8
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m7
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m6
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m5
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb3a7103c0c0bc9caee4c671cc731ae5

Code Sign

7a:26:dd:de:f9:66:f5:6e:b5:1f:f1:25:bb:96:c3:9bCertificate

Extended Key Usages

0e:29:e5:36:02:30:50:f9:d5:00:72:8c:a1:bf:24:44:11:e4:17:0eSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcrt

Sections

.text Size: 4KB - Virtual size: 3KB

m13 Size: 512B - Virtual size: 100B

m12 Size: 512B - Virtual size: 100B

m11 Size: 512B - Virtual size: 100B

m10 Size: 512B - Virtual size: 100B

m9 Size: 512B - Virtual size: 100B

m8 Size: 512B - Virtual size: 100B

m7 Size: 512B - Virtual size: 100B

m6 Size: 512B - Virtual size: 100B

m5 Size: 512B - Virtual size: 100B

m4 Size: 512B - Virtual size: 100B

m3 Size: 512B - Virtual size: 100B

.data Size: 272KB - Virtual size: 272KB

.data2 Size: 1KB - Virtual size: 1KB

.rsrc Size: 41KB - Virtual size: 40KB

7a:26:dd:de:f9:66:f5:6e:b5:1f:f1:25:bb:96:c3:9b
Certificate

0e:29:e5:36:02:30:50:f9:d5:00:72:8c:a1:bf:24:44:11:e4:17:0e
Signer

.text
Size: 4KB - Virtual size: 3KB

m13
Size: 512B - Virtual size: 100B

m12
Size: 512B - Virtual size: 100B

m11
Size: 512B - Virtual size: 100B

m10
Size: 512B - Virtual size: 100B

m9
Size: 512B - Virtual size: 100B

m8
Size: 512B - Virtual size: 100B

m7
Size: 512B - Virtual size: 100B

m6
Size: 512B - Virtual size: 100B

m5
Size: 512B - Virtual size: 100B

m4
Size: 512B - Virtual size: 100B

m3
Size: 512B - Virtual size: 100B

.data
Size: 272KB - Virtual size: 272KB

.data2
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 41KB - Virtual size: 40KB