15068b294bedb449c287446c1c4d520d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

15068b294bedb449c287446c1c4d520d_JaffaCakes118
Size

1019KB
MD5

15068b294bedb449c287446c1c4d520d
SHA1

18409134ce326a05622f2345e5ec555a80faff6d
SHA256

449c2f8f3fc8dba145d80875d65718df7816cfc49b6449d679d5e8c96118d8e2
SHA512

e28f24ab24b55c31b420ad81955d2e7c6fe8145d14cee1054d656d3dfaf8ea9a986b5280b142beff19e41f3b96f2b963954d54f49d5f82961bddc7654a9f7167
SSDEEP

24576:fQwA7DmQuy8bpdrv0A6TSTOvQoYh/j9wbFVUm:v0OyaV0A6GKvQVhZqL

Score

1^/10

Malware Config

Signatures

Files

15068b294bedb449c287446c1c4d520d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a08d0a3c1d1f4673feb6899c1b3492ce

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

29-01-1996 00:00

Not After

01-08-2028 23:59

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

63:71:6d:e2:d4:6c:33:93:9e:f9:04:76:d4:45:52:ff
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

31-08-2006 00:00

Not After

31-08-2007 23:59

Subject

CN=ITOCHU ELECTRONICS CORP.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Business Development Division,O=ITOCHU ELECTRONICS CORP.,L=Minato-ku,ST=Tokyo,C=JP

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:f8:a7:1a:ea:a8:bc:57:26:51:7c:52:94:e1:bf:11:7d:6d:2c:92
Signer

Actual PE Digest

30:f8:a7:1a:ea:a8:bc:57:26:51:7c:52:94:e1:bf:11:7d:6d:2c:92

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

kernel32

InitializeCriticalSection
CloseHandle
WaitForMultipleObjects
SetEvent
CreateThread
WaitForSingleObject
ResetEvent
MultiByteToWideChar
WideCharToMultiByte
GetLastError
CompareStringA
CompareStringW
LoadLibraryA
AreFileApisANSI
GetModuleFileNameA
GetModuleFileNameW
LocalFree
FormatMessageA
FormatMessageW
GetWindowsDirectoryA
SetFileAttributesA
SetFileAttributesW
RemoveDirectoryA
RemoveDirectoryW
CreateDirectoryA
CreateDirectoryW
DeleteFileA
DeleteFileW
GetShortPathNameA
lstrlenA
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryA
SetCurrentDirectoryA
GetTempPathA
GetTempFileNameA
FindClose
FindFirstFileA
FindFirstFileW
SetLastError
FindNextFileA
CreateFileA
CreateFileW
GetFileSize
SetFilePointer
ReadFile
SetFileTime
WriteFile
SetEndOfFile
CreateEventA
LeaveCriticalSection
EnterCriticalSection
Sleep
CreateProcessA
GetCommandLineW
GetCurrentThreadId
HeapAlloc
DeleteCriticalSection
TlsSetValue
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize

user32

DestroyWindow
PostMessageA
ShowWindow
MessageBoxA
KillTimer
EndDialog
SendMessageA
GetDlgItem
SetTimer
MessageBoxW
SetWindowTextW
SetWindowTextA
LoadStringW
LoadStringA
CharPrevA
DialogBoxParamA
GetWindowLongA
SetWindowLongA

oleaut32

VariantClear
SysAllocString

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a08d0a3c1d1f4673feb6899c1b3492ce

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bfCertificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

63:71:6d:e2:d4:6c:33:93:9e:f9:04:76:d4:45:52:ffCertificate

Extended Key Usages

Key Usages

30:f8:a7:1a:ea:a8:bc:57:26:51:7c:52:94:e1:bf:11:7d:6d:2c:92Signer

Headers

File Characteristics

Imports

comctl32

kernel32

user32

oleaut32

Sections

.text Size: 90KB - Virtual size: 90KB

.rdata Size: 15KB - Virtual size: 15KB

.data Size: 12KB - Virtual size: 14KB

.rsrc Size: 3KB - Virtual size: 2KB

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

63:71:6d:e2:d4:6c:33:93:9e:f9:04:76:d4:45:52:ff
Certificate

30:f8:a7:1a:ea:a8:bc:57:26:51:7c:52:94:e1:bf:11:7d:6d:2c:92
Signer

.text
Size: 90KB - Virtual size: 90KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 12KB - Virtual size: 14KB

.rsrc
Size: 3KB - Virtual size: 2KB