172ffcf1cdb62e1c02c74d84c4f5856d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

172ffcf1cdb62e1c02c74d84c4f5856d_JaffaCakes118
Size

1.3MB
MD5

172ffcf1cdb62e1c02c74d84c4f5856d
SHA1

bb8b629d5640c0b67875652acf1506cffd9dfcbc
SHA256

8021012b759f2ce0c72417d6bb2817129a530da60eac623289362a7dc623a095
SHA512

30a722061d11978436daad4a6dac714dd963afa9472580148bd878bcd375192b136d9226096b16dbd6e45be0b5393df2d471d6d3b6c41432df20cec5af75ad9e
SSDEEP

24576:MSILEpMulmmhMpp7zcD0vVZIyAMbveKW2VQ9Tv2Lw0FlQEZyN1TOsA4fU8dDrq8K:MSc43lmgMppZvVZAF3+Q9r2w4QN1AD8o

Score

1^/10

Malware Config

Signatures

Files

172ffcf1cdb62e1c02c74d84c4f5856d_JaffaCakes118
.rar
Kaspersky Keys/Activation Method for 2010, 2011, 2012.txt
Kaspersky Keys/Activation of Kaspersky 2012.url
.url
Kaspersky Keys/Activation video of Kaspersky 2011.url
.url
Kaspersky Keys/All Key Archive Here.url
Kaspersky Keys/Contact Us.txt
Kaspersky Keys/Facebook Fan Page For Direct Download.url
.url
Kaspersky Keys/Follow Us on Twitter.url
.url
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2011-EN-20120422-07810CCE.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2011-EN-20130608-0E0A7B9F.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2011-EN-20130609-0E0E3271.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2011-EN-20130611-0E138758.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2011-EN-20130614-0E198415.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2011-EN-20130618-0E2F719B.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2011-EN-20130625-0E494F82.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2011-EN-20130701-0E5CEDF1.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2011-EN-20130713-1118D639.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2011-EN-20130729-1175578C.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2011-EN-20130803-118895C5.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2011-EN-20130812-11AF0034.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2011-EN-20130818-11C5E29C.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20111217-132A48E0.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20111225-132BC71E.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20120115-13578B64.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20120115-138F7102.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20120131-13657F9F.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20120215-1372D6BA.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20120422-07810CCE.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20130608-0E0A7B9F.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20130609-0E0E3271.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20130611-0E138758.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20130614-0E198415.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20130618-0E2F719B.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20130625-0E494F82.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20130701-0E5CEDF1.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20130713-1118D639.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20130729-1175578C.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20130803-118895C5.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20130811-11AADA83.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20130812-11AF0034.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20130818-11C5E29C.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20130908-12270E7B.KEY
Kaspersky Keys/Kaspersky Anti-Virus/kavkisfile.com-KAV2012-EN-20130923-125F14D0.KEY
Kaspersky Keys/Kaspersky Internet Security/kavkisfile.com-KIS2012-EN-20120327-126BC2C9.KEY
Kaspersky Keys/Kaspersky Internet Security/kavkisfile.com-KIS2012-EN-20130721-114447A2.KEY
Kaspersky Keys/Kaspersky PURE/Kaspersky Key Exploit + Crack 5000 Days.rar
.rar
Kaspersky Key Exploit + Crack 5000 Days/Crack/clldr.dll
.dll windows:4 windows x86 arch:x86

75a9a8c43ec5a6fa637b04fbf1065943

Code Sign

6e:d8:78:24:19:16:56:5d:b8:c1:0d:b6:87:c0:25:82
Certificate

Issuer

CN=Kaspersky Lab

Not Before

23/09/2010, 19:24

Not After

31/12/2039, 23:59

Subject

CN=Kaspersky Lab

Extended Key Usages

ExtKeyUsageCodeSigning

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:67:06:6f:e6:f1:84:1e:8a:ba:28:7c:65:9a:65:7d:98:24:5b:e4
Signer

Actual PE Digest

6d:67:06:6f:e6:f1:84:1e:8a:ba:28:7c:65:9a:65:7d:98:24:5b:e4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

user32

GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
MessageBoxA
LoadStringA
GetSystemMetrics
CallNextHookEx
CharNextA
CharLowerBuffA
CharUpperBuffA
CharToOemA
wsprintfA

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
WriteFile
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualAlloc
SetFilePointer
SetEvent
SetEndOfFile
ResetEvent
ReadFile
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GetWindowsDirectoryA
GetVersionExA
GetThreadLocale
GetTempPathA
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetFileAttributesA
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCPInfo
FreeLibrary
FormatMessageA
EnumCalendarInfoA
EnterCriticalSection
DeleteCriticalSection
CreateFileA
CreateEventA
CompareStringA
CloseHandle
Sleep

Exports

Exports

FilterConnectCommunicationPort
FilterGetDosName
FilterGetMessage
FilterReplyMessage
FilterSendMessage
SetClientVerdict
WTSRegisterSessionNotification
WTSUnRegisterSessionNotification
hc

Sections

.text
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 331B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Kaspersky Key Exploit + Crack 5000 Days/Crack/clldr.ini
Kaspersky Key Exploit + Crack 5000 Days/KTS-Key.key
Kaspersky Keys/Kaspersky PURE/วิธี Crack Kaspersky PURE เครดิต RavMonk.pdf
.pdf
Kaspersky Keys/Kaspersky PURE/วิธีลง Kaspersky Pure.docx
.docx office2007
Kaspersky Keys/More key!.txt
Kaspersky Keys/Unblock Us.txt
Kaspersky Keys/Useful Links/Advertise With Us!.url
.url
Kaspersky Keys/Useful Links/Free Sign Up.url
.url
Kaspersky Keys/Useful Links/Frequently Asked Questions (FAQ).url
.url
Kaspersky Keys/Useful Links/Google Safe Browsing diagnostic For kavkisfile.com.url
.url
Kaspersky Keys/อ่านก่อน วิธีการใส่ Key.txt

Sharing

General

Malware Config

Signatures

Files

75a9a8c43ec5a6fa637b04fbf1065943

Code Sign

6e:d8:78:24:19:16:56:5d:b8:c1:0d:b6:87:c0:25:82Certificate

Extended Key Usages

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

6d:67:06:6f:e6:f1:84:1e:8a:ba:28:7c:65:9a:65:7d:98:24:5b:e4Signer

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

Exports

Exports

Sections

.text Size: 244KB - Virtual size: 243KB

.itext Size: 1024B - Virtual size: 776B

.data Size: 19KB - Virtual size: 19KB

.bss Size: - Virtual size: 18KB

.idata Size: 3KB - Virtual size: 3KB

.edata Size: 512B - Virtual size: 331B

.reloc Size: 23KB - Virtual size: 23KB

.rsrc Size: 5KB - Virtual size: 5KB

6e:d8:78:24:19:16:56:5d:b8:c1:0d:b6:87:c0:25:82
Certificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

6d:67:06:6f:e6:f1:84:1e:8a:ba:28:7c:65:9a:65:7d:98:24:5b:e4
Signer

.text
Size: 244KB - Virtual size: 243KB

.itext
Size: 1024B - Virtual size: 776B

.data
Size: 19KB - Virtual size: 19KB

.bss
Size: - Virtual size: 18KB

.idata
Size: 3KB - Virtual size: 3KB

.edata
Size: 512B - Virtual size: 331B

.reloc
Size: 23KB - Virtual size: 23KB

.rsrc
Size: 5KB - Virtual size: 5KB