094427ad26fda2600406f63fe7e738cc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

094427ad26fda2600406f63fe7e738cc_JaffaCakes118
Size

378KB
MD5

094427ad26fda2600406f63fe7e738cc
SHA1

45efc258faa67cfda92d4ba189a08b65f732b36b
SHA256

1220a36dea545c1792ac775e124febf4662d0d93bc1301348a282284823fb33d
SHA512

1e3f207d7e02d8a1093621817f36b69cd4896d1843e3589387d9db5d157c9a4514db0f10bd2cf2309c0049fe7abe6507708f6421332f7334952a8e7892de33b7
SSDEEP

6144:mGnWWZEwKpM4kM0BiGEvHgjxXKtT7T3pLt9wFQVfIh6blAhl4gALrqxi8yC8H1:dWeEbUBxUHgjx6B35tiFThgw4gA/Ii8s

Score

1^/10

Malware Config

Signatures

Files

094427ad26fda2600406f63fe7e738cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c27b9114979ae71e0d2eaa83c9156d9

Code Sign

7a:fc:e6:92:9e:dd:66:5e:b8:a2:76:41:81:88:cd:f9
Certificate

Issuer

CN=N4oayXiYyyAeeD6klfjEHvdgAPLxtxcxuGuzreeQq7ezbx8v7VhdYZ98t9CIqUmxYCCTyHGHH7j8PkrTY8lzuSETIfwrIlYqec6qmk5vRrsje8Sc9xEx7JhhsUq6o5t8CvUsck2GMLWwjnvBaD3TErFsiGUajHq8WoGjicggHwHfWLrT3GYwN7FeaUg7h2BsqxJmPIHJkWjYRg1lcIzibbgStHns1bSEElZZRWqbI1ZgL7HKqyB6ilAd1WOK9ylOC46FmeDcmwFDcRauWOvUzBXBWkNxbQbwMEhNcdHRb3SHDmbpnSnGlcOUShetyZMWVUsT9KbRrVQ4tFFVKUXqQGLzQ3D9BfEJjoeuU5JmRirpZcLYuRFcdTAxdFdgA8u7zrP75Ef5A39pozJ3sty1uWdgPUNuCs7OJa8n9dGf6TbKMMY8Rel2DdHLToTAMhx5gtGQwMeEkile914JprplvniA4sHj2ZUK13GewGbBCuaAqOJX7bL7RnpNmg1sefx7em19mwZVHxKEqVRnsj7ypry1dHiQaXR3BD9laalZIfWgStu8jrMSF7tltvGktlxXcUixXKYHfdbhpKOQWZMlba1tpaXNNSjKt1gwHJQucNzCzrdK3dLdiGbBGUBbBm8Smuw5eO4jYcTdNpayI12Ql2arlQFqhO5l8Ke3g1PFkjB2sSmurczyuQhfSMWu9CoDtVbivBBzrTJ4MlAm7iYKS22PakPqqluPvXOHu9VBTr4lWvRs4DzOvO3vtRofdUUuJzgeGtxOGdXU3sjDZjfdjF97vAl3wvnJ5fgNtJiQbjwT1udi2eBp6mg3ms6VkzKcRffr9jeQdypoLd1jH2UUCVveybE1pQ54PEi8RSyvYA1z5vk8Vb4fwIa6YjKuynw27i8WKsA15OmAEwUJ4TCZljDCX8GyprpkfM8XMfQ8yq6G6IGBRdMKwCxkdHvruEgJayniTNZ8OoA7TPINsTs9rNzfSVRpiQIxgKx6SUPNHsO8uQfRpx9PlkEWtq4KbcAzgmYxsHlurbr4b4DTHu3wqUOxXD6Mq7Pcm7JPfxE5HRJec3rwGRZUKzhEGKAScjzi7xsdM32WvBF2FEmT9CuMjCosoLPqAM4jwXsWwcW3khSRFZfIhqHTZBFDerKPAOLbWsKlMcXO2xC96w6dELq6BpNrNlXy6VgpcTWJQwQhSPNmPT67hT8eObBB3MI4VZiYtVnuPZvUyo3ZC8zHxSV9hj4rlTWTM8KuoZWZPEZP8dzA8qXNhwCMuvlKvybziGHXVjiHMQzz74hGWnXKGrD5RMIUHrGGXom3xQG2BczinxITwLjroZ41KnEMy1jPeb6S2q2u3BxBeX6PfHYgpoDzmPLM2wBEqjq8DyTBNgaInti8qz5acyNNQZORzXKOOi2YZBwUtDjlWYOve3QCzdzMgXJwY9C1wVKd9GO1xtWHrbQFM4IBMSHBx7AJtEIZBjB3xHjwrOgBMwel5QgGvQxny9D4HPcv2NHj2lc4sXyjkiql2TcTMd7i5ZfzGRQmE3nkS4kkPwjGNuCrt1pR5M8xLTYQRDcnhY6VL7f2Gl97lXAv8gXGgfUkdnx46SmoyOszKv6T2APsvhNoCZ22BXuUTdMQC46j53f7k4IIOIlbgPn1uPX5OctAcuKp7tS4mrp3nnAhTqJdWM5jcIizXRcFqzAuD9NzL21lcNQp2Ii4m5le5OFJxMDvM6DkEUBQCcjwsviYPSpLEqfMoBVntsotoYoI4pIS8vHCjqnTTtDSqkwZjR2M3dKZeqtZ8ZdJpSJfffc4HlItE5AVTC8PZaFvgUIZyRNsuw9uauxtAAwaJKtG9bvRqdIthe27rXRciQMYqqN5RE57taUmU9BORZ9q3ozgh3s3FCGUI74UIcA15Xg8Zq26gXRRbJzSZCfclR2Zen43eco3azwa7ayHWnqnfSuXTYBQXS9rsRbxpTYYKapGPM58Ee4zHIRZHewf7gx2nWtw9P25gHeWG4Gp

Not Before

11/10/2012, 06:59

Not After

31/12/2039, 23:59

Subject

CN=N4oayXiYyyAeeD6klfjEHvdgAPLxtxcxuGuzreeQq7ezbx8v7VhdYZ98t9CIqUmxYCCTyHGHH7j8PkrTY8lzuSETIfwrIlYqec6qmk5vRrsje8Sc9xEx7JhhsUq6o5t8CvUsck2GMLWwjnvBaD3TErFsiGUajHq8WoGjicggHwHfWLrT3GYwN7FeaUg7h2BsqxJmPIHJkWjYRg1lcIzibbgStHns1bSEElZZRWqbI1ZgL7HKqyB6ilAd1WOK9ylOC46FmeDcmwFDcRauWOvUzBXBWkNxbQbwMEhNcdHRb3SHDmbpnSnGlcOUShetyZMWVUsT9KbRrVQ4tFFVKUXqQGLzQ3D9BfEJjoeuU5JmRirpZcLYuRFcdTAxdFdgA8u7zrP75Ef5A39pozJ3sty1uWdgPUNuCs7OJa8n9dGf6TbKMMY8Rel2DdHLToTAMhx5gtGQwMeEkile914JprplvniA4sHj2ZUK13GewGbBCuaAqOJX7bL7RnpNmg1sefx7em19mwZVHxKEqVRnsj7ypry1dHiQaXR3BD9laalZIfWgStu8jrMSF7tltvGktlxXcUixXKYHfdbhpKOQWZMlba1tpaXNNSjKt1gwHJQucNzCzrdK3dLdiGbBGUBbBm8Smuw5eO4jYcTdNpayI12Ql2arlQFqhO5l8Ke3g1PFkjB2sSmurczyuQhfSMWu9CoDtVbivBBzrTJ4MlAm7iYKS22PakPqqluPvXOHu9VBTr4lWvRs4DzOvO3vtRofdUUuJzgeGtxOGdXU3sjDZjfdjF97vAl3wvnJ5fgNtJiQbjwT1udi2eBp6mg3ms6VkzKcRffr9jeQdypoLd1jH2UUCVveybE1pQ54PEi8RSyvYA1z5vk8Vb4fwIa6YjKuynw27i8WKsA15OmAEwUJ4TCZljDCX8GyprpkfM8XMfQ8yq6G6IGBRdMKwCxkdHvruEgJayniTNZ8OoA7TPINsTs9rNzfSVRpiQIxgKx6SUPNHsO8uQfRpx9PlkEWtq4KbcAzgmYxsHlurbr4b4DTHu3wqUOxXD6Mq7Pcm7JPfxE5HRJec3rwGRZUKzhEGKAScjzi7xsdM32WvBF2FEmT9CuMjCosoLPqAM4jwXsWwcW3khSRFZfIhqHTZBFDerKPAOLbWsKlMcXO2xC96w6dELq6BpNrNlXy6VgpcTWJQwQhSPNmPT67hT8eObBB3MI4VZiYtVnuPZvUyo3ZC8zHxSV9hj4rlTWTM8KuoZWZPEZP8dzA8qXNhwCMuvlKvybziGHXVjiHMQzz74hGWnXKGrD5RMIUHrGGXom3xQG2BczinxITwLjroZ41KnEMy1jPeb6S2q2u3BxBeX6PfHYgpoDzmPLM2wBEqjq8DyTBNgaInti8qz5acyNNQZORzXKOOi2YZBwUtDjlWYOve3QCzdzMgXJwY9C1wVKd9GO1xtWHrbQFM4IBMSHBx7AJtEIZBjB3xHjwrOgBMwel5QgGvQxny9D4HPcv2NHj2lc4sXyjkiql2TcTMd7i5ZfzGRQmE3nkS4kkPwjGNuCrt1pR5M8xLTYQRDcnhY6VL7f2Gl97lXAv8gXGgfUkdnx46SmoyOszKv6T2APsvhNoCZ22BXuUTdMQC46j53f7k4IIOIlbgPn1uPX5OctAcuKp7tS4mrp3nnAhTqJdWM5jcIizXRcFqzAuD9NzL21lcNQp2Ii4m5le5OFJxMDvM6DkEUBQCcjwsviYPSpLEqfMoBVntsotoYoI4pIS8vHCjqnTTtDSqkwZjR2M3dKZeqtZ8ZdJpSJfffc4HlItE5AVTC8PZaFvgUIZyRNsuw9uauxtAAwaJKtG9bvRqdIthe27rXRciQMYqqN5RE57taUmU9BORZ9q3ozgh3s3FCGUI74UIcA15Xg8Zq26gXRRbJzSZCfclR2Zen43eco3azwa7ayHWnqnfSuXTYBQXS9rsRbxpTYYKapGPM58Ee4zHIRZHewf7gx2nWtw9P25gHeWG4Gp

Extended Key Usages

ExtKeyUsageCodeSigning

cf:b1:88:74:68:fb:4f:93:88:6b:91:b2:d7:60:9d:96:0a:71:c1:aa
Signer

Actual PE Digest

cf:b1:88:74:68:fb:4f:93:88:6b:91:b2:d7:60:9d:96:0a:71:c1:aa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
VirtualAlloc
CreateFileW
GetWindowsDirectoryW
lstrcatW

user32

LoadIconW
CreateIconIndirect
GetDlgCtrlID
GetScrollPos
RegisterDeviceNotificationA
DdeEnableCallback
DrawStateA
MessageBoxIndirectW
LoadMenuA
GetTabbedTextExtentA
UnpackDDElParam
DialogBoxIndirectParamW
ToAsciiEx
IsWindow
LoadKeyboardLayoutA
GetCursor
UserHandleGrantAccess
GetMenuState
SetMenuItemInfoA
TabbedTextOutW
mouse_event
DdeSetUserHandle
SetWindowWord
SetDlgItemTextW
IsMenu
SetWindowTextW
GetSystemMenu
RegisterClassA
ChangeDisplaySettingsExW
SetMenuInfo
GetKeyState
ChildWindowFromPoint
LoadCursorFromFileW
SendMessageCallbackA
DdeKeepStringHandle
FlashWindow
OpenIcon
CreateMenu
FindWindowW
GetIconInfo
GetWindowInfo
IsCharAlphaNumericA
FrameRect
FlashWindowEx
SetSysColors
GetCapture
DdeGetLastError
SetWindowsHookA
PostThreadMessageA
TranslateMessage
GetDlgItemTextA
GetShellWindow
CreateAcceleratorTableW
DrawMenuBar
DdeDisconnect
SetClipboardData
CreateDialogParamW
ToUnicodeEx
CreatePopupMenu
IMPQueryIMEA
CloseWindowStation
GetGuiResources
GetPropW
SetActiveWindow
CharNextExA
IsRectEmpty
LockSetForegroundWindow
SetScrollRange
EnumPropsExW
PostMessageA
GetClassInfoExW
UpdateWindow
GetFocus
GetWindow
PaintDesktop
GetKeyboardLayout
ChangeMenuA
GetThreadDesktop
CharLowerBuffW
GetAltTabInfo
CountClipboardFormats
CreateMDIWindowA
WindowFromPoint
GetMenu
CreateDesktopA
EnableWindow
ShowWindowAsync
UnloadKeyboardLayout
LoadCursorA
SetSystemCursor
SendDlgItemMessageA
EnumDisplaySettingsExW
VkKeyScanExA
RedrawWindow
CreateWindowExA
DlgDirSelectComboBoxExA
GetAncestor

advapi32

RegOpenKeyExW

Sections

.text
Size: 356KB - Virtual size: 355KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c27b9114979ae71e0d2eaa83c9156d9

Code Sign

7a:fc:e6:92:9e:dd:66:5e:b8:a2:76:41:81:88:cd:f9Certificate

Extended Key Usages

cf:b1:88:74:68:fb:4f:93:88:6b:91:b2:d7:60:9d:96:0a:71:c1:aaSigner

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 356KB - Virtual size: 355KB

.data Size: 3KB - Virtual size: 3KB

.data4 Size: 1024B - Virtual size: 1000B

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 1024B - Virtual size: 1000B

.rsrc Size: 1024B - Virtual size: 584B

.reloc Size: 1024B - Virtual size: 576B

7a:fc:e6:92:9e:dd:66:5e:b8:a2:76:41:81:88:cd:f9
Certificate

cf:b1:88:74:68:fb:4f:93:88:6b:91:b2:d7:60:9d:96:0a:71:c1:aa
Signer

.text
Size: 356KB - Virtual size: 355KB

.data
Size: 3KB - Virtual size: 3KB

.data4
Size: 1024B - Virtual size: 1000B

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 1024B - Virtual size: 584B

.reloc
Size: 1024B - Virtual size: 576B