270d794e9a94cde88b05706636cbfcbd_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

270d794e9a94cde88b05706636cbfcbd_JaffaCakes118
Size

346KB
MD5

270d794e9a94cde88b05706636cbfcbd
SHA1

abe44161887eb32e1b4a80b237543c373300d69a
SHA256

63eb203a7c32397e4d27531cf9625c19d767bf8b3af7d0b9762cb63f2e29612d
SHA512

d91027333fcdcb6d308789a424ff8295251ef8cafa88bf477a95e45bac16ef56ba8d2580765dc480ea12323432a9d896d274e0db86d2d5c0c21fbe76151acd1b
SSDEEP

6144:vJCBxYqwKMdajz1s7mV2e4kM2Etb2DhOlKgdiYosfuP3b8GvGkGOGHb:AaqwPaFs7mp4kMLbmOS5PIWJ/m

Score

1^/10

Malware Config

Signatures

Files

270d794e9a94cde88b05706636cbfcbd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e54f7677754df964f1d17e7d7e1b9c0a

Code Sign

5e:f3:f0:a1:49:96:69:b1:4d:b4:e1:4c:06:30:11:16
Certificate

Issuer

CN=jhjkkkkkkkkkkkkkkkkkkkkkkkkkkkk FFazC5E6CCzzGhj5uKv2iztrLvo8926yDMpM9w2z8rkkwyhAcqn3frIwwuq4AcFhmLjn2wM kjEbc54lr2JnxxIgML1zqn7t81CkcAML1J d88nc1rpkHpoaKn2AHnpAIzBc7fuDjpFDhxJja9Fq9aL6J83I48f2MKpx7MlAJp6fbysxx8zadoFvF9qgvErjoLi1eyrjDMfo9Iw7L2DaL6ICJadHi6uCwL39DsCvg3AdpyatA9AyefhJ5v3fqB6xusrGsc193z5yD8Kmr GdJv4b9KhenyworGCom36fMqogI4j87qn Dboij861dApgAlB938i73AHHdb dDt3FAKspuJu45f8Ftv6ioBmoC5bc4ry hKKl5HJqMhuB4Fdgp2rkiFMGrMIt272CuicddkfcBJcMvGa8FIq 954eqclcC9Ls1vebwKfhKbo5s9da4H2bkvl5Mfk1HFBxDkEdbCgkJr7tv4F2ve1GBohbJ87EnhfbAjz7 bwBxaiwsuL 3lqqkH5BauEmfpfDghM4o9qk3kttD9eBvkyalyJktf24t8L2df2hnwdHzqugc4JEBegCkft5yAkbFnIHLhfKa1baHJHdnajM2dHctssibu9fMCfrv3bc2L3 18JMss5nhyI1A2mLMuuEhyIrwFmIEqeb2xmccHb1dJHua5xM6hq2uu3nkzmswIcJundFDql4kMemCgwg1mJf6jwqkraAH6HlCngtGjdg9zlats9k1vl8yfH9lnc8rdf95DAdo3tCL15dIm KA5CGtgovrrvmGxlbjq8 Ioic9helnrcKzE692FeyHCBLiAFAdxpzpBoqI8L7gGn94pw3MzADyLf HuzsbdzfIdCaE3hMK9M9IuqpwdAecuiDp Hmja9zFL4nawdjLsFm97Mj1e4cBFfJ4z39JvCidFDnod69kfy3yB3C1DGoed6k7poII4mIpDxdCrspw 6Gf1Gi4egpCfahjpBKeIfMez85Gsmno cg4LfC5za1GgL96p H8KHd9s3BktEieovsrlfynngl7vFinFK3kv6ikuonCDheam5ub4j3bkj7AyxqfblHvnLDxpdEDfGwKdvez3k7hFIIaKloa8wyvxMDgveMCdde5G9bdB4F6rMc42a5zmwe3msx4A5m1zwoyurEhIl5p3lMLolncGhixLoydILbgxk8HknM1M3FBLv4DkG5AoxkdfyK1lu3JgcrEpvIod5Es7u4h4uu1Kt1zskqA9qg1DlBfxDHAtHnmxc7lFHFiJJup2l1lJeCKL2CtguhzsunsGlr71FygLcak7GIrjg2onrAcroDy2DrvJIgmrsq wGtmDLgiuFse1wnnEyGG7huKuMsgleCMxw1BnHp4lAde8nzMMime2dDhCys9hi5D9Jrqz2apFprrG9KLEvFInCmhdwp8pmeBzw3FiuhAifHkpjy9dwrrLLGAaJnae3AoKlLxKuefC8kmw xzbwv9aGk3bKnJKG737vd6Cd1vH6DsHD5wB563Gllcg8kM3ul4MqufBu7zr4MBrwbuHnuDksoqclHMBbpeJkvFfabJ mbF oncA6i2FghtfEcbzcg5gsuikK4bjmgscsmAofhn9FLMr5oxJppxIh553GAJ3rrr1sr ja16Luq5vIiaomKBiKhdKIl3sp8e3upL9 u7Fnj69If1cCws4gd7iAn7BHah6lonC7C4DsMefKwoCr JuhoCk6v61IguvbFhbp1aviwGprwBnaaI3x9gop DilBMC3LL8gxAx E44yoAukaz73c99dziC xp8hbE85pHE29BJBMnncBBHbMAK974ipEem4E42r8H1Bf1H41 dfDvjseC52r7AKloCmzL3HesEKvIBvD9izaeejF62zkA43akBMAu5ELpdlz8xD3ffI8dDf5v7anbxkssDmxhjD7MCq4u4i1h4w1ykB 1eJLwEIz46LhkyztG7uourgooxH7pEHq4cCgB79val42tt6qDzk7F6lpn v4jEh24a2aw9 fM5jJnsI1Fsbi2MgcfzHm4cpt xCmEretkdnIj5fKsr65o5vBhi1MCLhCym1KK5Kd6MHzqKavcDrqwsF KhlzCAyz itz8jzCxH8k4EvDBhdJqCdbteqaviirwnyG7uafnxBD9sm9BaizKaE97BAMp bHbDymoo72D7D4gtq9zj22eHI9ifHvDza9fd4rCwDzhtMkiq5qE59LsGfG6mA8cpcj33xofm9n8IcAEndM r4MggmKdtC1bzdA7bv1c4Aaayn6LM6K17Ar1vk3AMchunf5DllMfioHe8uCjGqwHJji1nHrk3efBnjLCiiM6lBGfcDyHal48A1KE kAqHMtpJrF5LfkA94I1wpumgtufCG4I1fekDsuhn9m7IvDpinEiEp8l4IE4JEwci59nqtMgcseywbnMIorbn9C1wJ8Ik4lp8 Ak9 nG4yfMkr3lDjhwdK5At6 dEId2DyqLl2JBLnapJrcov1 c6bzeCk4sdK1sJMxCv8KbDHuJ12uiMJ392vk94IFuxy2ierclLqB5x6D2eMG6sMb33lDu1KKc8HxhMAHf5rlpJB6jEkJnetrg3LFHH8mvyIeman9yuc15F4jfgp2wrEAf5Bo16scMGJ2lhkfBvnsGzw9J2JipLam1Hmx3uvyvKFv5dC73MxCgIApvCjyAx H8B3hayl BLe 9fmCGy2kp5EdE7EBwM9zfBwx2Fi8lt4C4mIEG2MzeKiIwkczKqEL 1gbDc9nuDHvigfbdKBLFDl7d43DwaHI6JpBesqqgKJGdbk2l2tnFByf4i LbeDLnKqdyA31y p8 J4wwvJxeezJqroGysw7r9aAK8K1IieHqt9 cFMer7E7DE59woEuEz7KfwbEd1HJJAal7f8ajbbDEq4doLF1LEkpuJwFJhF4mFL jD6zLuA yH6cjf2orndFg6EJ935hHpfJD5cqE96 k17adgLCC3hImCFpKxvjhravas625rsM53hF9fier Ms5kiiv8bDiHk zd5 f5967teC1Amhy 1vBv31nj7uGusksIDB9np733bwJuqFFGr d4EtFifHIiflHhxa9FcLHGbLIh3Ir1zn9173AJAwAafL7oxifw8tqg8Ar7jbon6z2 LGKHtF6ve22LiuBJc8btf7ImtCgBFqqo3L7 wd45BbAKxpm cuoILaKJv79ICL2asvrhF6xtJq6jDCKJ2jDLxx9r5cc97dwrnCDicwDmspLBgjbrzuufpghFll2pk9fslueDbCMoK9AKJqutJvraAycr6vGe9qrHm5zroqirxilfltEgA2fx2wKzlBHyIGBmp49iJkoHIoaG4ICrMHuxcph4tkDji2B3xy2FwJdLgzIIgI2tB1pjeDC14AgMpgz3EpndbuLsfkcguBkrgwgFcc Kog5E 7M5vaoAoLozF8F16n5Jl1wKE26dahqDq7IAxsrFtreyqfLqw8sxj4jdGnLCmv3j4cD6fjx4c7kb73uHd2IalnxLgzL851LvxfK8zfMqyymzIeu7mKtl1lC3gd4K9Hsfx4wGL6vzyA6Mi2yqnmExrJELId xfGaK66jF8o FqD2h3Cx JqK9MD3rMdFDz oE1BBJMuMdHvKsrzvD2un3Aisgycsf66MDoI6fjo7kwC278qC9bghuJnCEdrukh9efzuMb7dvrMvK7CEh8 27iKk5hFCH6GHHdscDKCGpBGssALswj5h8vjcbLyyy2zeKl3MHEL82IcLLGyrKEgAHyf wnng LeilrBAm7sArbc37AMgrn69ohe2lJ6E7b58KwsAxrC9FFCHvbxA83yqtEJpi9vGw4mHqhiLw351oaCngCFHGetEc7Fa3wq5I31x1oMq9Fx6A5dMsveHftEJhjwhdz2AvJHxGlLzxAI uocbuudsD48kmcl3vB93i55gBF K6Hp98h2 aaaaaaaaaaaaaaaaaaaaaaaaaa

Not Before

31-12-2012 08:41

Not After

31-12-2039 23:59

Subject

CN=jhjkkkkkkkkkkkkkkkkkkkkkkkkkkkk FFazC5E6CCzzGhj5uKv2iztrLvo8926yDMpM9w2z8rkkwyhAcqn3frIwwuq4AcFhmLjn2wM kjEbc54lr2JnxxIgML1zqn7t81CkcAML1J d88nc1rpkHpoaKn2AHnpAIzBc7fuDjpFDhxJja9Fq9aL6J83I48f2MKpx7MlAJp6fbysxx8zadoFvF9qgvErjoLi1eyrjDMfo9Iw7L2DaL6ICJadHi6uCwL39DsCvg3AdpyatA9AyefhJ5v3fqB6xusrGsc193z5yD8Kmr GdJv4b9KhenyworGCom36fMqogI4j87qn Dboij861dApgAlB938i73AHHdb dDt3FAKspuJu45f8Ftv6ioBmoC5bc4ry hKKl5HJqMhuB4Fdgp2rkiFMGrMIt272CuicddkfcBJcMvGa8FIq 954eqclcC9Ls1vebwKfhKbo5s9da4H2bkvl5Mfk1HFBxDkEdbCgkJr7tv4F2ve1GBohbJ87EnhfbAjz7 bwBxaiwsuL 3lqqkH5BauEmfpfDghM4o9qk3kttD9eBvkyalyJktf24t8L2df2hnwdHzqugc4JEBegCkft5yAkbFnIHLhfKa1baHJHdnajM2dHctssibu9fMCfrv3bc2L3 18JMss5nhyI1A2mLMuuEhyIrwFmIEqeb2xmccHb1dJHua5xM6hq2uu3nkzmswIcJundFDql4kMemCgwg1mJf6jwqkraAH6HlCngtGjdg9zlats9k1vl8yfH9lnc8rdf95DAdo3tCL15dIm KA5CGtgovrrvmGxlbjq8 Ioic9helnrcKzE692FeyHCBLiAFAdxpzpBoqI8L7gGn94pw3MzADyLf HuzsbdzfIdCaE3hMK9M9IuqpwdAecuiDp Hmja9zFL4nawdjLsFm97Mj1e4cBFfJ4z39JvCidFDnod69kfy3yB3C1DGoed6k7poII4mIpDxdCrspw 6Gf1Gi4egpCfahjpBKeIfMez85Gsmno cg4LfC5za1GgL96p H8KHd9s3BktEieovsrlfynngl7vFinFK3kv6ikuonCDheam5ub4j3bkj7AyxqfblHvnLDxpdEDfGwKdvez3k7hFIIaKloa8wyvxMDgveMCdde5G9bdB4F6rMc42a5zmwe3msx4A5m1zwoyurEhIl5p3lMLolncGhixLoydILbgxk8HknM1M3FBLv4DkG5AoxkdfyK1lu3JgcrEpvIod5Es7u4h4uu1Kt1zskqA9qg1DlBfxDHAtHnmxc7lFHFiJJup2l1lJeCKL2CtguhzsunsGlr71FygLcak7GIrjg2onrAcroDy2DrvJIgmrsq wGtmDLgiuFse1wnnEyGG7huKuMsgleCMxw1BnHp4lAde8nzMMime2dDhCys9hi5D9Jrqz2apFprrG9KLEvFInCmhdwp8pmeBzw3FiuhAifHkpjy9dwrrLLGAaJnae3AoKlLxKuefC8kmw xzbwv9aGk3bKnJKG737vd6Cd1vH6DsHD5wB563Gllcg8kM3ul4MqufBu7zr4MBrwbuHnuDksoqclHMBbpeJkvFfabJ mbF oncA6i2FghtfEcbzcg5gsuikK4bjmgscsmAofhn9FLMr5oxJppxIh553GAJ3rrr1sr ja16Luq5vIiaomKBiKhdKIl3sp8e3upL9 u7Fnj69If1cCws4gd7iAn7BHah6lonC7C4DsMefKwoCr JuhoCk6v61IguvbFhbp1aviwGprwBnaaI3x9gop DilBMC3LL8gxAx E44yoAukaz73c99dziC xp8hbE85pHE29BJBMnncBBHbMAK974ipEem4E42r8H1Bf1H41 dfDvjseC52r7AKloCmzL3HesEKvIBvD9izaeejF62zkA43akBMAu5ELpdlz8xD3ffI8dDf5v7anbxkssDmxhjD7MCq4u4i1h4w1ykB 1eJLwEIz46LhkyztG7uourgooxH7pEHq4cCgB79val42tt6qDzk7F6lpn v4jEh24a2aw9 fM5jJnsI1Fsbi2MgcfzHm4cpt xCmEretkdnIj5fKsr65o5vBhi1MCLhCym1KK5Kd6MHzqKavcDrqwsF KhlzCAyz itz8jzCxH8k4EvDBhdJqCdbteqaviirwnyG7uafnxBD9sm9BaizKaE97BAMp bHbDymoo72D7D4gtq9zj22eHI9ifHvDza9fd4rCwDzhtMkiq5qE59LsGfG6mA8cpcj33xofm9n8IcAEndM r4MggmKdtC1bzdA7bv1c4Aaayn6LM6K17Ar1vk3AMchunf5DllMfioHe8uCjGqwHJji1nHrk3efBnjLCiiM6lBGfcDyHal48A1KE kAqHMtpJrF5LfkA94I1wpumgtufCG4I1fekDsuhn9m7IvDpinEiEp8l4IE4JEwci59nqtMgcseywbnMIorbn9C1wJ8Ik4lp8 Ak9 nG4yfMkr3lDjhwdK5At6 dEId2DyqLl2JBLnapJrcov1 c6bzeCk4sdK1sJMxCv8KbDHuJ12uiMJ392vk94IFuxy2ierclLqB5x6D2eMG6sMb33lDu1KKc8HxhMAHf5rlpJB6jEkJnetrg3LFHH8mvyIeman9yuc15F4jfgp2wrEAf5Bo16scMGJ2lhkfBvnsGzw9J2JipLam1Hmx3uvyvKFv5dC73MxCgIApvCjyAx H8B3hayl BLe 9fmCGy2kp5EdE7EBwM9zfBwx2Fi8lt4C4mIEG2MzeKiIwkczKqEL 1gbDc9nuDHvigfbdKBLFDl7d43DwaHI6JpBesqqgKJGdbk2l2tnFByf4i LbeDLnKqdyA31y p8 J4wwvJxeezJqroGysw7r9aAK8K1IieHqt9 cFMer7E7DE59woEuEz7KfwbEd1HJJAal7f8ajbbDEq4doLF1LEkpuJwFJhF4mFL jD6zLuA yH6cjf2orndFg6EJ935hHpfJD5cqE96 k17adgLCC3hImCFpKxvjhravas625rsM53hF9fier Ms5kiiv8bDiHk zd5 f5967teC1Amhy 1vBv31nj7uGusksIDB9np733bwJuqFFGr d4EtFifHIiflHhxa9FcLHGbLIh3Ir1zn9173AJAwAafL7oxifw8tqg8Ar7jbon6z2 LGKHtF6ve22LiuBJc8btf7ImtCgBFqqo3L7 wd45BbAKxpm cuoILaKJv79ICL2asvrhF6xtJq6jDCKJ2jDLxx9r5cc97dwrnCDicwDmspLBgjbrzuufpghFll2pk9fslueDbCMoK9AKJqutJvraAycr6vGe9qrHm5zroqirxilfltEgA2fx2wKzlBHyIGBmp49iJkoHIoaG4ICrMHuxcph4tkDji2B3xy2FwJdLgzIIgI2tB1pjeDC14AgMpgz3EpndbuLsfkcguBkrgwgFcc Kog5E 7M5vaoAoLozF8F16n5Jl1wKE26dahqDq7IAxsrFtreyqfLqw8sxj4jdGnLCmv3j4cD6fjx4c7kb73uHd2IalnxLgzL851LvxfK8zfMqyymzIeu7mKtl1lC3gd4K9Hsfx4wGL6vzyA6Mi2yqnmExrJELId xfGaK66jF8o FqD2h3Cx JqK9MD3rMdFDz oE1BBJMuMdHvKsrzvD2un3Aisgycsf66MDoI6fjo7kwC278qC9bghuJnCEdrukh9efzuMb7dvrMvK7CEh8 27iKk5hFCH6GHHdscDKCGpBGssALswj5h8vjcbLyyy2zeKl3MHEL82IcLLGyrKEgAHyf wnng LeilrBAm7sArbc37AMgrn69ohe2lJ6E7b58KwsAxrC9FFCHvbxA83yqtEJpi9vGw4mHqhiLw351oaCngCFHGetEc7Fa3wq5I31x1oMq9Fx6A5dMsveHftEJhjwhdz2AvJHxGlLzxAI uocbuudsD48kmcl3vB93i55gBF K6Hp98h2 aaaaaaaaaaaaaaaaaaaaaaaaaa

Extended Key Usages

ExtKeyUsageCodeSigning

eb:a0:98:86:58:c5:b7:30:6b:65:a6:7d:f4:90:eb:a1:54:a8:f1:bc
Signer

Actual PE Digest

eb:a0:98:86:58:c5:b7:30:6b:65:a6:7d:f4:90:eb:a1:54:a8:f1:bc

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

user32

EnableWindow
GetDC
GetDlgItem
GetDlgItemTextA
GetParent
GetSystemMetrics
GetWindowLongA
GetWindowRect
IsDlgButtonChecked
LoadStringA
MessageBeep
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
PostMessageA
ReleaseDC
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetWindowLongA
ShowWindow
wsprintfA
CheckRadioButton
CheckDlgButton
CharPrevA
CharNextA
CallWindowProcA
LoadIconA
LoadCursorA
MessageBoxA

gdi32

CreateFontIndirectA
GetObjectA
GetDeviceCaps
DeleteObject
GetStockObject

advapi32

RegOpenKeyW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

m7
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m6
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m5
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e54f7677754df964f1d17e7d7e1b9c0a

Code Sign

5e:f3:f0:a1:49:96:69:b1:4d:b4:e1:4c:06:30:11:16Certificate

Extended Key Usages

eb:a0:98:86:58:c5:b7:30:6b:65:a6:7d:f4:90:eb:a1:54:a8:f1:bcSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 4KB - Virtual size: 3KB

m7 Size: 512B - Virtual size: 100B

m6 Size: 512B - Virtual size: 100B

m5 Size: 512B - Virtual size: 100B

m4 Size: 512B - Virtual size: 100B

m3 Size: 512B - Virtual size: 100B

.data Size: 272KB - Virtual size: 271KB

.data2 Size: 1KB - Virtual size: 1KB

.rsrc Size: 41KB - Virtual size: 40KB

5e:f3:f0:a1:49:96:69:b1:4d:b4:e1:4c:06:30:11:16
Certificate

eb:a0:98:86:58:c5:b7:30:6b:65:a6:7d:f4:90:eb:a1:54:a8:f1:bc
Signer

.text
Size: 4KB - Virtual size: 3KB

m7
Size: 512B - Virtual size: 100B

m6
Size: 512B - Virtual size: 100B

m5
Size: 512B - Virtual size: 100B

m4
Size: 512B - Virtual size: 100B

m3
Size: 512B - Virtual size: 100B

.data
Size: 272KB - Virtual size: 271KB

.data2
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 41KB - Virtual size: 40KB