3736bd0aac2af099ee99df3a8d8aa170_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3736bd0aac2af099ee99df3a8d8aa170_JaffaCakes118
Size

90KB
MD5

3736bd0aac2af099ee99df3a8d8aa170
SHA1

9da72209d89bb06e968561869e2db90ead0ad0f8
SHA256

7269e4d87a6ab9ae0775dffcf499434f6818a4011e5613560682f4591b15da57
SHA512

746d1225814b184a87412a41815272d2dc3927f64abda63e96a2080ebeab1d63fd92fe5119ce78ead12fa42a43d21a4eaec8cc9886e9bb47295b45eb1f6c55f0
SSDEEP

1536:TBC9yaFdZkx3ynCD9OoNS9KtY0nUaUpoeSQ9EtcHUS0tiNU3+fvD4Q0ZfZSiuiDw:TBC9yaFdZS31D0pKW0nQpHq+fb4Q0Zhy

Score

1^/10

Malware Config

Signatures

Files

3736bd0aac2af099ee99df3a8d8aa170_JaffaCakes118
.exe windows:1 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Code Sign

04:00:00:00:00:00:f9:7f:aa:2e:1e
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

16/12/2003, 13:00

Not After

27/01/2014, 11:00

Subject

CN=GlobalSign RootSign Partners CA,OU=RootSign Partners CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:1e:44:a5:e2:4e
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

28/01/1999, 13:00

Not After

27/01/2017, 12:00

Subject

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:00:00:00:00:01:1b:b4:ca:64:74
Certificate

Issuer

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Not Before

12/08/2008, 02:41

Not After

12/08/2011, 02:41

Subject

CN=TechPowerUp,O=TechPowerUp,C=HK,1.2.840.113549.1.9.1=#0c1561646d696e4074656368706f77657275702e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:10:92:eb:82:95
Certificate

Issuer

CN=GlobalSign RootSign Partners CA,OU=RootSign Partners CA,O=GlobalSign nv-sa,C=BE

Not Before

05/02/2007, 09:00

Not After

27/01/2014, 09:00

Subject

CN=GlobalSign Time Stamping Authority,O=GlobalSign,1.2.840.113549.1.9.1=#0c1c74696d657374616d70696e666f40676c6f62616c7369676e2e636f6d

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:1e:44:a5:ec:be
Certificate

Issuer

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Not Before

22/01/2004, 10:00

Not After

27/01/2017, 11:00

Subject

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0b:7f:6b:00:00:00:00:00:19
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:00

Not After

23/05/2016, 17:10

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:f0:f0:ac:25:04:12:55:54:ba:43:68:8a:e3:34:77:7d:50:79:55
Signer

Actual PE Digest

09:f0:f0:ac:25:04:12:55:54:ba:43:68:8a:e3:34:77:7d:50:79:55

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 76KB - Virtual size: 832KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

09d0478591d4f788cb3e5ea416c25237

Code Sign

04:00:00:00:00:00:f9:7f:aa:2e:1eCertificate

Key Usages

04:00:00:00:00:01:1e:44:a5:e2:4eCertificate

Key Usages

01:00:00:00:00:01:1b:b4:ca:64:74Certificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:10:92:eb:82:95Certificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:1e:44:a5:ec:beCertificate

Key Usages

61:0b:7f:6b:00:00:00:00:00:19Certificate

Key Usages

09:f0:f0:ac:25:04:12:55:54:ba:43:68:8a:e3:34:77:7d:50:79:55Signer

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 76KB - Virtual size: 832KB

.rsrc Size: 5KB - Virtual size: 64KB

04:00:00:00:00:00:f9:7f:aa:2e:1e
Certificate

04:00:00:00:00:01:1e:44:a5:e2:4e
Certificate

01:00:00:00:00:01:1b:b4:ca:64:74
Certificate

04:00:00:00:00:01:10:92:eb:82:95
Certificate

04:00:00:00:00:01:1e:44:a5:ec:be
Certificate

61:0b:7f:6b:00:00:00:00:00:19
Certificate

09:f0:f0:ac:25:04:12:55:54:ba:43:68:8a:e3:34:77:7d:50:79:55
Signer

.text
Size: 76KB - Virtual size: 832KB

.rsrc
Size: 5KB - Virtual size: 64KB