1849898d8d1a5d86546e432b192d05ee_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

1849898d8d1a5d86546e432b192d05ee_JaffaCakes118
Size

737KB
MD5

1849898d8d1a5d86546e432b192d05ee
SHA1

a1556eaa8662229d8f8337990514d5ff1432781e
SHA256

614f13679a3ccd2e42af9da7fca866c83c27a1236961611bf4225a3e3f8f3a54
SHA512

028a9ff6d51b132027a131b7a0ba05b23bb6c5279751023cd302b1e25930f20a03c72362f66f76570364b9393723db16f0db963692fcde1a3e0088fe6e35483c
SSDEEP

12288:pe3kERAIY7uMXOKAA5Yp2v6C5zpI6m2kToRuO7ny:7ERAIYqMXCA5S2v6C5zpjfkToAO7ny

Score

1^/10

Malware Config

Signatures

Files

1849898d8d1a5d86546e432b192d05ee_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6e46d5957450700ee8d3fd70147c65de

Code Sign

f4:4e:26:04:bd:2e:1c:5e:74:c7:14:9d:9b:84:2f:6f
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

22-06-2016 00:00

Not After

22-06-2017 23:59

Subject

CN=OOO \"Prototip\",O=OOO \"Prototip\",POSTALCODE=443099,STREET=Chapayevskaya\, 89,L=Samara,ST=Samarskaya,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19-01-2010 00:00

Not After

18-01-2038 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:15:db:fc:68:b5:a4:eb:b5:5b:b4:d8:b9:cb:14:1d:89:a7:78:ee
Signer

Actual PE Digest

06:15:db:fc:68:b5:a4:eb:b5:5b:b4:d8:b9:cb:14:1d:89:a7:78:ee

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetDriveTypeA
VirtualAllocEx

user32

CallWindowProcA
CheckDlgButton
CheckMenuItem
ClientToScreen
CloseClipboard
CreateDialogParamA
CreatePopupMenu
CreateWindowExA
DefWindowProcA
DeleteMenu
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxIndirectParamA
DialogBoxParamA
DispatchMessageA
DrawIconEx
DrawTextA
EmptyClipboard
EnableMenuItem
EnableWindow
EndDialog
EndPaint
FillRect
FindWindowA
FindWindowExA
FlashWindowEx
FrameRect
GetClientRect
GetClipboardData
GetCursor
GetCursorPos
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetDlgItemInt
GetDlgItemTextA
GetFocus
GetForegroundWindow
GetKeyNameTextA
GetKeyState
GetKeyboardState
GetMenu
GetMessageA
GetParent
GetPropA
GetScrollInfo
GetSubMenu
GetSysColor
GetSysColorBrush
GetWindowDC
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
CallNextHookEx
InsertMenuA
InsertMenuItemA
InvalidateRect
IsClipboardFormatAvailable
IsDialogMessageA
IsDlgButtonChecked
IsIconic
IsWindow
IsWindowVisible
IsZoomed
KillTimer
LoadIconA
LoadImageA
LoadMenuA
MapDialogRect
MapVirtualKeyA
MessageBoxA
MoveWindow
MsgWaitForMultipleObjects
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
RegisterClassA
RegisterHotKey
RegisterWindowMessageA
ReleaseDC
RemovePropA
ScreenToClient
SendDlgItemMessageA
SendMessageA
SendMessageTimeoutA
SetActiveWindow
SetCursor
SetDlgItemInt
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetKeyboardState
SetMenuDefaultItem
SetMenuItemInfoA
SetPropA
SetScrollInfo
SetScrollPos
SetTimer
SetWindowLongA
SetWindowPlacement
SetWindowPos
SetWindowTextA
SetWindowsHookExA
ShowWindow
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UnregisterHotKey
UpdateWindow
WaitForInputIdle
wsprintfW
BeginPaint
AttachThreadInput
AppendMenuA
LoadCursorA
LoadCursorW
GetWindowThreadProcessId

advapi32

RegOpenKeyW
RegQueryValueExW

shlwapi

SHDeleteKeyA
SHDeleteEmptyKeyA

Sections

.text
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 497KB - Virtual size: 497KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e46d5957450700ee8d3fd70147c65de

Code Sign

f4:4e:26:04:bd:2e:1c:5e:74:c7:14:9d:9b:84:2f:6fCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

06:15:db:fc:68:b5:a4:eb:b5:5b:b4:d8:b9:cb:14:1d:89:a7:78:eeSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

Sections

.text Size: 167KB - Virtual size: 166KB

.rdata Size: 30KB - Virtual size: 29KB

.data Size: 497KB - Virtual size: 497KB

.rsrc Size: 38KB - Virtual size: 37KB

f4:4e:26:04:bd:2e:1c:5e:74:c7:14:9d:9b:84:2f:6f
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

06:15:db:fc:68:b5:a4:eb:b5:5b:b4:d8:b9:cb:14:1d:89:a7:78:ee
Signer

.text
Size: 167KB - Virtual size: 166KB

.rdata
Size: 30KB - Virtual size: 29KB

.data
Size: 497KB - Virtual size: 497KB

.rsrc
Size: 38KB - Virtual size: 37KB