110ca7ab6d2016e0e83cc96dabfd443b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

110ca7ab6d2016e0e83cc96dabfd443b_JaffaCakes118
Size

412KB
MD5

110ca7ab6d2016e0e83cc96dabfd443b
SHA1

71517fddde88753fe82253aca1f74828fde387e5
SHA256

c4aa99d63b481369768df3e4e06a00ac2271eb3080f5f505e950175187e8bb36
SHA512

c87482bacdc8c642dc37c153eb4949a3bb00d59d2003cc7924e75c90de1dc1e05e5046bc293f5cbe390f775b5caec8722cdfac7d6b79650d13b447294b73ffa3
SSDEEP

12288:I/OQT9PLWQhwpgIuA/t5tV8xjsgBov6/vYXubE/MP6:tQ2/0jdc

Score

1^/10

Malware Config

Signatures

Files

110ca7ab6d2016e0e83cc96dabfd443b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e54f7677754df964f1d17e7d7e1b9c0a

Code Sign

7c:c5:de:b2:91:78:8d:9c:48:9a:75:79:78:db:87:61
Certificate

Issuer

CN=ttttttttttttttttttttttttt w5FkHbMejbyr m7lMxFk77cKAj96MyGiiwLMFeKjbbc6mDKuHJIH5tCkzdCGdh1JMmz3izkInfwb23GG2pb5IEzifEMz7KBrIkhjyCA 7pIggwMdBBk6c1C2zFr89tiBrokeo439run4n5cd4gej1tj9dq21Mo3Kin92MLKsHMfdoyLv5ba3 22t1nMlkCKl37lHHjmGms3lrFCoCJKfGvGads6McjuymChvmFbCDAzEz88muMyjhAkwnijcMjogkAs2jALnqav4CncxnlMh9xIgfML8y LdKt17BdJdaEyrcls8zurwwIqaLHKiIadBouJkHjIrv zHetsd9ei1r3f36BCHwzrlzmv5vEeH4JJc6IFvF3 GiqLEpmBipd9Mpg8viJDKIzH njCbnaIL7pEq6DEu1 jeBbIh CyrhnhEzLq9CnossH i353cfCdfrALq9JFv3EhoDiDD4bg8I HJ29p1HI7jLFw42h4fC2bfxf5koAmx6D7CvEJr7M2KI82184 AD6xn quqG7muJs4su1acgkt4IshEs4qodbID 6Lf CniMKsJgjBhGddFcEBgDG8lvuuDzhjc KjuapEj5Ifmsn1IGA2jfpi1gr8rcmhgb8zHb4Kts24LeHM4n4s njsCEff3j5eJpstsagGrkHtJnj j55 1kMcM2B968kux4j66D2JttotEjEk16G9uBxcBDjhAln8tpbB1kE3t4cesK4eMxhhk5BvmuMEftn2Dq4GIHhv Ij7o3 gx7d1Dwitf 48L6cKtHs 6vanpCzJsa4oujMKeCroyrlt6u7Er77E6ric5g5rueM6Bteiack5huEovKxuu8ykHa8D6lGgl4Ewado6z5Jdqujp8ygaDw89r JDGCtM9hwhjrpu5AavDmEeCh1erGG7b wwrIiv qtmGG8mq3i9IkeIhIIqriuiMfkq9fH2k4yzf372Akybwcd9k Az8e1LoJrfaobfhqID1IqsI4n8FG6cvtB598iucdr8HDHzyEbhp51uM6ffMjykr8c9qyb2ttLd2r1FomzBfJHcegIJoKdfxkJebu7fz6iw9eCG3 rKhxEnvADHBx3nt1MiBBss3woi22mJwkDmhmzClemJH2dJ8fh1dnluFuK9H9sea6tpu8JJ 9Me8ooLMn2JKceF3KK MGpcuDIJA6E8jKa4AnGHLq7kM64acvxb9FbiEwxfwpA8Ji3GgwfIpukxnajG3hL4tCmxxjwKvsamp5pvzlhFA6kIxwdd2nezJm2532yAeG9q8tcMaqKjbKLGAClHsIHeAlkJua2Jql92v1IspMihKndGBgunta4 CgpsoFEf5s7icbo48Bpxotq4BdkDgyCc2 61qEbL1bhL7JGD757LaKG12JCbjoBdkgMz7q3Itcb7mBwbehED o8pM7d5BkCHkJr5FtGwb8d9vdGfF9B dejLgqnvHLib qsoHrelJBi5Ct vhIH8wp7Ek54cblhiispL6G5qaDGbC1EG6ho6km2CCLJd6LdvsDeiIDau1itzD4gDp3A53vzmH4Dhetwx3imsrsJ8mb5CgL j5i6698oiJ2uK2daztEdi4bkEmlbxMpHyt5bC5gDb955hmB2oHHtfgzIecyEpw3aAIw6goggEwtIzj3edynDFrHgm3oFd1M7vBMEF3szfDlwCqHB5d6yM2vk5jH3yib46dm7clErKBneB3qGpHwplaB5a3ohvhz9LmgCKK9jKEvnn8EIM5MCoDAMEKqt8lza1km2Bny mDvgjp4wcpmcHM1eKC5Bhas9MlbMB9dEyKBwrdgptxcMDx2GDeyr9c h1K89l6vyHJ88AvkuzMLbEg2vskhKpCxFHyhcxtMJiEmJnEGErgsqD8zagJzLK3ExpslLFgqw4eoKI1wDx5v95E9bfupz29lG2vweAMv2K5uh9C3BH2e3g eeeeeeeeeeeeeeeeeeeeee

Not Before

30/12/2012, 07:47

Not After

31/12/2039, 23:59

Subject

CN=ttttttttttttttttttttttttt w5FkHbMejbyr m7lMxFk77cKAj96MyGiiwLMFeKjbbc6mDKuHJIH5tCkzdCGdh1JMmz3izkInfwb23GG2pb5IEzifEMz7KBrIkhjyCA 7pIggwMdBBk6c1C2zFr89tiBrokeo439run4n5cd4gej1tj9dq21Mo3Kin92MLKsHMfdoyLv5ba3 22t1nMlkCKl37lHHjmGms3lrFCoCJKfGvGads6McjuymChvmFbCDAzEz88muMyjhAkwnijcMjogkAs2jALnqav4CncxnlMh9xIgfML8y LdKt17BdJdaEyrcls8zurwwIqaLHKiIadBouJkHjIrv zHetsd9ei1r3f36BCHwzrlzmv5vEeH4JJc6IFvF3 GiqLEpmBipd9Mpg8viJDKIzH njCbnaIL7pEq6DEu1 jeBbIh CyrhnhEzLq9CnossH i353cfCdfrALq9JFv3EhoDiDD4bg8I HJ29p1HI7jLFw42h4fC2bfxf5koAmx6D7CvEJr7M2KI82184 AD6xn quqG7muJs4su1acgkt4IshEs4qodbID 6Lf CniMKsJgjBhGddFcEBgDG8lvuuDzhjc KjuapEj5Ifmsn1IGA2jfpi1gr8rcmhgb8zHb4Kts24LeHM4n4s njsCEff3j5eJpstsagGrkHtJnj j55 1kMcM2B968kux4j66D2JttotEjEk16G9uBxcBDjhAln8tpbB1kE3t4cesK4eMxhhk5BvmuMEftn2Dq4GIHhv Ij7o3 gx7d1Dwitf 48L6cKtHs 6vanpCzJsa4oujMKeCroyrlt6u7Er77E6ric5g5rueM6Bteiack5huEovKxuu8ykHa8D6lGgl4Ewado6z5Jdqujp8ygaDw89r JDGCtM9hwhjrpu5AavDmEeCh1erGG7b wwrIiv qtmGG8mq3i9IkeIhIIqriuiMfkq9fH2k4yzf372Akybwcd9k Az8e1LoJrfaobfhqID1IqsI4n8FG6cvtB598iucdr8HDHzyEbhp51uM6ffMjykr8c9qyb2ttLd2r1FomzBfJHcegIJoKdfxkJebu7fz6iw9eCG3 rKhxEnvADHBx3nt1MiBBss3woi22mJwkDmhmzClemJH2dJ8fh1dnluFuK9H9sea6tpu8JJ 9Me8ooLMn2JKceF3KK MGpcuDIJA6E8jKa4AnGHLq7kM64acvxb9FbiEwxfwpA8Ji3GgwfIpukxnajG3hL4tCmxxjwKvsamp5pvzlhFA6kIxwdd2nezJm2532yAeG9q8tcMaqKjbKLGAClHsIHeAlkJua2Jql92v1IspMihKndGBgunta4 CgpsoFEf5s7icbo48Bpxotq4BdkDgyCc2 61qEbL1bhL7JGD757LaKG12JCbjoBdkgMz7q3Itcb7mBwbehED o8pM7d5BkCHkJr5FtGwb8d9vdGfF9B dejLgqnvHLib qsoHrelJBi5Ct vhIH8wp7Ek54cblhiispL6G5qaDGbC1EG6ho6km2CCLJd6LdvsDeiIDau1itzD4gDp3A53vzmH4Dhetwx3imsrsJ8mb5CgL j5i6698oiJ2uK2daztEdi4bkEmlbxMpHyt5bC5gDb955hmB2oHHtfgzIecyEpw3aAIw6goggEwtIzj3edynDFrHgm3oFd1M7vBMEF3szfDlwCqHB5d6yM2vk5jH3yib46dm7clErKBneB3qGpHwplaB5a3ohvhz9LmgCKK9jKEvnn8EIM5MCoDAMEKqt8lza1km2Bny mDvgjp4wcpmcHM1eKC5Bhas9MlbMB9dEyKBwrdgptxcMDx2GDeyr9c h1K89l6vyHJ88AvkuzMLbEg2vskhKpCxFHyhcxtMJiEmJnEGErgsqD8zagJzLK3ExpslLFgqw4eoKI1wDx5v95E9bfupz29lG2vweAMv2K5uh9C3BH2e3g eeeeeeeeeeeeeeeeeeeeee

Extended Key Usages

ExtKeyUsageCodeSigning

19:f4:6c:65:43:b9:c6:64:9b:ff:73:c4:07:48:12:59:10:a1:7a:65
Signer

Actual PE Digest

19:f4:6c:65:43:b9:c6:64:9b:ff:73:c4:07:48:12:59:10:a1:7a:65

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

user32

EnableWindow
GetDC
GetDlgItem
GetDlgItemTextA
GetParent
GetSystemMetrics
GetWindowLongA
GetWindowRect
IsDlgButtonChecked
LoadStringA
MessageBeep
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
PostMessageA
ReleaseDC
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetWindowLongA
ShowWindow
wsprintfA
CheckRadioButton
CheckDlgButton
CharPrevA
CharNextA
CallWindowProcA
LoadIconA
LoadCursorA
MessageBoxA

gdi32

CreateFontIndirectA
GetObjectA
GetDeviceCaps
DeleteObject
GetStockObject

advapi32

RegOpenKeyW

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

m7
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m6
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m5
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 350KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e54f7677754df964f1d17e7d7e1b9c0a

Code Sign

7c:c5:de:b2:91:78:8d:9c:48:9a:75:79:78:db:87:61Certificate

Extended Key Usages

19:f4:6c:65:43:b9:c6:64:9b:ff:73:c4:07:48:12:59:10:a1:7a:65Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 3KB - Virtual size: 3KB

m7 Size: 512B - Virtual size: 100B

m6 Size: 512B - Virtual size: 100B

m5 Size: 512B - Virtual size: 100B

m4 Size: 512B - Virtual size: 100B

m3 Size: 512B - Virtual size: 100B

.data Size: 350KB - Virtual size: 349KB

.data2 Size: 1KB - Virtual size: 1KB

.rsrc Size: 41KB - Virtual size: 40KB

7c:c5:de:b2:91:78:8d:9c:48:9a:75:79:78:db:87:61
Certificate

19:f4:6c:65:43:b9:c6:64:9b:ff:73:c4:07:48:12:59:10:a1:7a:65
Signer

.text
Size: 3KB - Virtual size: 3KB

m7
Size: 512B - Virtual size: 100B

m6
Size: 512B - Virtual size: 100B

m5
Size: 512B - Virtual size: 100B

m4
Size: 512B - Virtual size: 100B

m3
Size: 512B - Virtual size: 100B

.data
Size: 350KB - Virtual size: 349KB

.data2
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 41KB - Virtual size: 40KB