3c7b13381416e585e872e80b28256ce0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3c7b13381416e585e872e80b28256ce0_JaffaCakes118
Size

1.8MB
MD5

3c7b13381416e585e872e80b28256ce0
SHA1

95c821c94ba047119bffccce00c88c56e5d12b9a
SHA256

a716325823f3e85a43056a0afadc696823ad3330f69a30f09accf0c663cb326b
SHA512

06bf5db569292ebf896a77122e013dd99661a8d7937446196ba1b68aadcabefbbffae69eba44762cc33855e597d7ac69ba889da99630032a14111ee930763b98
SSDEEP

49152:gBkveFCN7l7d2FfRMsxiAG4zU8vDaEjde3Zl92wNiBJqjw:gBBFIlx2FJM/r8rOpP2rqjw

Score

1^/10

Malware Config

Signatures

Files

3c7b13381416e585e872e80b28256ce0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0a:57:f8:b0:f3:0e:36:2e:ec:55:ba:cb:27:f0:f0:41
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

15/11/2012, 00:00

Not After

15/11/2016, 23:59

Subject

CN=VIRTUALI SAS DI COLAPICCHIONI UMBERTO & C,O=VIRTUALI SAS DI COLAPICCHIONI UMBERTO & C,POSTALCODE=20098,STREET=via Dostoevskij 2,L=San Giuliano Milanese,ST=MI,C=IT

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f9:59:a3:30:a8:95:b8:6c:bc:5a:05:6c:8c:02:29:4b:92:4c:3e:d0
Signer

Actual PE Digest

f9:59:a3:30:a8:95:b8:6c:bc:5a:05:6c:8c:02:29:4b:92:4c:3e:d0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_maprintf
curl_mfprintf
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
initBglman
initCouatl

Sections

Size: 412KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 60KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 20KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 168KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:beCertificate

Extended Key Usages

Key Usages

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bbCertificate

Extended Key Usages

Key Usages

0a:57:f8:b0:f3:0e:36:2e:ec:55:ba:cb:27:f0:f0:41Certificate

Extended Key Usages

Key Usages

f9:59:a3:30:a8:95:b8:6c:bc:5a:05:6c:8c:02:29:4b:92:4c:3e:d0Signer

Headers

File Characteristics

Exports

Exports

Sections

Size: 412KB - Virtual size: 1.2MB

Size: 60KB - Virtual size: 312KB

Size: 20KB - Virtual size: 160KB

Size: 4KB - Virtual size: 24KB

.rsrc Size: 24KB - Virtual size: 24KB

Size: 168KB - Virtual size: 2.8MB

.data Size: 1.1MB - Virtual size: 1.1MB

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

0a:57:f8:b0:f3:0e:36:2e:ec:55:ba:cb:27:f0:f0:41
Certificate

f9:59:a3:30:a8:95:b8:6c:bc:5a:05:6c:8c:02:29:4b:92:4c:3e:d0
Signer

.rsrc
Size: 24KB - Virtual size: 24KB

.data
Size: 1.1MB - Virtual size: 1.1MB