3e0be6b1c24ff39bacff7f924c0b165b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3e0be6b1c24ff39bacff7f924c0b165b_JaffaCakes118
Size

333KB
MD5

3e0be6b1c24ff39bacff7f924c0b165b
SHA1

5f49d40bb5c36297e58ec9e6127c79c356ccf348
SHA256

de1811db7569aa3209ac789af87ded95b28fc11a8def2fb067134aeb99770b7d
SHA512

4b03fce15b6a747a5abe8e1e3d809205081c339a62294722d35e178d80f70559e0f14a092b9fa81ac360c3c40847591f1ee7e8505b02772a8a3170cb0b1b62f4
SSDEEP

6144:xRdivpYrQOEFR22Lz/J8qb5bPRvjRdSO2ElZI8lHfSsxnagTbFF3b0:xRdiBkQDR2K8wbDdSO2ElZz73Tpdo

Score

1^/10

Malware Config

Signatures

Files

3e0be6b1c24ff39bacff7f924c0b165b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3291c1991d6fa7e5027bacb87580045f

Code Sign

01:53:45:36:48:34:a4:6c:bd:50:c7:3a:5e:f3:e8:b0
Certificate

Issuer

CN=bbbbbbbbbbbbbbbbbbbbbbbbbbbbbb p2Kxxl14bgzMAsxrCcJvybqkwBmxinnrqAz36i8Ibth4Jfcy9LhpotmKe5ElaFDdd9itF3s4IbHtaImlgqK1DpiDKGLJd9K3qhLcG18 F8JdiswAHbKyblLr7GKckqvdIecnCIpnJq5CdJ j5mHkmrlhDjizCd3 tGBojm9simxq8C9DKu9im jBCAlHyLtCtc5HaaGgwKgLwH Eunwtif8Ga HixH2zrymq5ry84luylMCzsDsw3fmf 1MKnysk5sywAnMkqjpml61lkoFwuceieK5qEkEjxen64xpJolJfehnmfqtaeebCjKLKxl1Dgr C zidMM1wH5LMkCBmrg2 bGuLL2Dw6jgne8HIGt4mdJlF2ABJtHG xmwexJ22MEIfgduAn7 Jy pme6ukCDA7qLBz2Jt2fF7 41vIwp5yvvi77jHG2j7qpiibkH4JCegj9CkB2flx2ps3cqyjfd 7an9JCHdk 6kadj9 7f5JLri1HqALkm 1KLvadFrJ1JLn8MzjA8MugqweBAm3grfI2m 6nu97C545LiJ66vAeKECFhtDGvALAhsM9LeMaG7xhBzG1ims3 irtvrqmj5bcLHG5jdA6fph3n4Gvar5eiybuIbM8EJ Gh6fpquiiCfndi jHAknot r4BdM5iremB96okHgrbE9sxc vH1twIzy6euBdywGp y21bdeHH2uC6va Fter7snoIpI2uztjJ8d4wrl1q83dz4luJe pK2jqgmfha4Abfk42zGtflEy2sMohqj g2dt33bnv 22aLp7b5zbvrK5fHG76k4 j3A8GM w2xbktdyMf7borsl3gfl173x1t5izeL7Ehyv9uI3wxGIJAIih11J Ktldi3 bfexBvxL7rF6brHsu2t1nDcy oy4vyG3LHBfBe15u1kaJvD1FAnuaHKr7353HFl7BsrAythhJpjrxMfiLmFf5oJ5r6uvEmG9y4gFCgkeEdI2hE6JkfpmyffmkrxAEnqkJ2mi35cBtjrH3l j5sD kHLKs9mr3M5wwpDBd8so1hxB3ebgKfp9xBwj53ftabhzfM Kz8o1HteLgC691uD7hrHoqarmfz8l47Jqr3qi8wK3oje7wvfrnEMn4ah4fiwlpzjBkBw7DF7HrDnytrKCMIIai65wpidIm kvFmMlFiDyB3zz9rMm8FhfuL bln2yfy4Diy7HMLDqdb1Es7CrEr KsfuF2BqJkfF2l26ugJc2bjwme2CLeCKABkwAdvlL1Ds pMytD8C4z6ExhqskmK4vKx4DA6xhBJz4AHiijIjk5x3H1pDznjECJdxu kAChCy eHbIgsqtxrc HFn5pukosm4kn3dM9BuMchHxfDkxztaKxpGz4cBp5pugF8I5anryxqI5oM Mkq5rmh3v4cEH6zmtbKfrrAl7s87DxA7EmswwEDoLHHkJdksz3tM576JjJLioiI9fxow5vBEJk3gckCKnu1i6yxidvuEfwtxnGsbKazGww9i9b4a93vBugA61sIwegeza2vKpf6dJ9prffe1ip8lAvbHgu lF5KloGEuuL8Kbhafl AvoLtzjMIu7pCEAbJJukva9vmI iLlIDavMfkHdLb4mbxlLecGIm9BueapmoEL5Ivnuupc2nb o7AIxlri4 1c3f4tgjDLBm2zd vgzt3Luxd8LxHI31u LqAoi 7mvCL78bD581ux3HvCM3BanEsMjnhdwF5o1MngoziyyzokaxsHDIfrqCKx4e49rAyIBfgllxHckELgkKLcyxd9 Dkkq5Hby 5u3MjictBbH5maMkD ILG 6wA7qqEFFlGvkgke7Ii3p9M5soMD9A M6v87oqoE3H5c99HbjBbmfzd2Buk1nCGMz4 v9vh2kxCBF2aHeJAa6jssBH65EA4fpMb9DdpzyIFvmis1eynkcyF1onMhrKl8uAr aaaaaaaaaaaaaaaaaaaaaaa

Not Before

09/01/2013, 13:12

Not After

31/12/2039, 23:59

Subject

CN=bbbbbbbbbbbbbbbbbbbbbbbbbbbbbb p2Kxxl14bgzMAsxrCcJvybqkwBmxinnrqAz36i8Ibth4Jfcy9LhpotmKe5ElaFDdd9itF3s4IbHtaImlgqK1DpiDKGLJd9K3qhLcG18 F8JdiswAHbKyblLr7GKckqvdIecnCIpnJq5CdJ j5mHkmrlhDjizCd3 tGBojm9simxq8C9DKu9im jBCAlHyLtCtc5HaaGgwKgLwH Eunwtif8Ga HixH2zrymq5ry84luylMCzsDsw3fmf 1MKnysk5sywAnMkqjpml61lkoFwuceieK5qEkEjxen64xpJolJfehnmfqtaeebCjKLKxl1Dgr C zidMM1wH5LMkCBmrg2 bGuLL2Dw6jgne8HIGt4mdJlF2ABJtHG xmwexJ22MEIfgduAn7 Jy pme6ukCDA7qLBz2Jt2fF7 41vIwp5yvvi77jHG2j7qpiibkH4JCegj9CkB2flx2ps3cqyjfd 7an9JCHdk 6kadj9 7f5JLri1HqALkm 1KLvadFrJ1JLn8MzjA8MugqweBAm3grfI2m 6nu97C545LiJ66vAeKECFhtDGvALAhsM9LeMaG7xhBzG1ims3 irtvrqmj5bcLHG5jdA6fph3n4Gvar5eiybuIbM8EJ Gh6fpquiiCfndi jHAknot r4BdM5iremB96okHgrbE9sxc vH1twIzy6euBdywGp y21bdeHH2uC6va Fter7snoIpI2uztjJ8d4wrl1q83dz4luJe pK2jqgmfha4Abfk42zGtflEy2sMohqj g2dt33bnv 22aLp7b5zbvrK5fHG76k4 j3A8GM w2xbktdyMf7borsl3gfl173x1t5izeL7Ehyv9uI3wxGIJAIih11J Ktldi3 bfexBvxL7rF6brHsu2t1nDcy oy4vyG3LHBfBe15u1kaJvD1FAnuaHKr7353HFl7BsrAythhJpjrxMfiLmFf5oJ5r6uvEmG9y4gFCgkeEdI2hE6JkfpmyffmkrxAEnqkJ2mi35cBtjrH3l j5sD kHLKs9mr3M5wwpDBd8so1hxB3ebgKfp9xBwj53ftabhzfM Kz8o1HteLgC691uD7hrHoqarmfz8l47Jqr3qi8wK3oje7wvfrnEMn4ah4fiwlpzjBkBw7DF7HrDnytrKCMIIai65wpidIm kvFmMlFiDyB3zz9rMm8FhfuL bln2yfy4Diy7HMLDqdb1Es7CrEr KsfuF2BqJkfF2l26ugJc2bjwme2CLeCKABkwAdvlL1Ds pMytD8C4z6ExhqskmK4vKx4DA6xhBJz4AHiijIjk5x3H1pDznjECJdxu kAChCy eHbIgsqtxrc HFn5pukosm4kn3dM9BuMchHxfDkxztaKxpGz4cBp5pugF8I5anryxqI5oM Mkq5rmh3v4cEH6zmtbKfrrAl7s87DxA7EmswwEDoLHHkJdksz3tM576JjJLioiI9fxow5vBEJk3gckCKnu1i6yxidvuEfwtxnGsbKazGww9i9b4a93vBugA61sIwegeza2vKpf6dJ9prffe1ip8lAvbHgu lF5KloGEuuL8Kbhafl AvoLtzjMIu7pCEAbJJukva9vmI iLlIDavMfkHdLb4mbxlLecGIm9BueapmoEL5Ivnuupc2nb o7AIxlri4 1c3f4tgjDLBm2zd vgzt3Luxd8LxHI31u LqAoi 7mvCL78bD581ux3HvCM3BanEsMjnhdwF5o1MngoziyyzokaxsHDIfrqCKx4e49rAyIBfgllxHckELgkKLcyxd9 Dkkq5Hby 5u3MjictBbH5maMkD ILG 6wA7qqEFFlGvkgke7Ii3p9M5soMD9A M6v87oqoE3H5c99HbjBbmfzd2Buk1nCGMz4 v9vh2kxCBF2aHeJAa6jssBH65EA4fpMb9DdpzyIFvmis1eynkcyF1onMhrKl8uAr aaaaaaaaaaaaaaaaaaaaaaa

Extended Key Usages

ExtKeyUsageCodeSigning

8c:c4:86:8a:53:58:77:d8:8a:3c:3d:c0:36:02:23:03:10:2f:d6:bf
Signer

Actual PE Digest

8c:c4:86:8a:53:58:77:d8:8a:3c:3d:c0:36:02:23:03:10:2f:d6:bf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileW
CreateFileW
CreateProcessW
CreateThread
DeleteFileW
ExitProcess
ExpandEnvironmentStringsW
FileTimeToDosDateTime
FileTimeToLocalFileTime
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetSystemTimeAsFileTime
VirtualAllocEx
HeapAlloc
HeapFree
LocalAlloc
LocalFree
QueryPerformanceCounter
SetCurrentDirectoryA
SetErrorMode
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
GetTickCount
ReadFile

user32

LoadIconA
GetSysColor
RegisterClassExA
LoadCursorA
LoadCursorW

advapi32

RegOpenKeyA

msvcrt

memset
_XcptFilter
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_ftol
_initterm
_ltow
_wcslwr
_wfopen
_wfullpath
_wsplitpath
exit
fclose
floor
fwprintf
swprintf
wcsncpy
wcsstr

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 273KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3291c1991d6fa7e5027bacb87580045f

Code Sign

01:53:45:36:48:34:a4:6c:bd:50:c7:3a:5e:f3:e8:b0Certificate

Extended Key Usages

8c:c4:86:8a:53:58:77:d8:8a:3c:3d:c0:36:02:23:03:10:2f:d6:bfSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Sections

.text Size: 5KB - Virtual size: 4KB

.data Size: 273KB - Virtual size: 272KB

.rdata2 Size: 512B - Virtual size: 100B

.rsrc Size: 41KB - Virtual size: 40KB

01:53:45:36:48:34:a4:6c:bd:50:c7:3a:5e:f3:e8:b0
Certificate

8c:c4:86:8a:53:58:77:d8:8a:3c:3d:c0:36:02:23:03:10:2f:d6:bf
Signer

.text
Size: 5KB - Virtual size: 4KB

.data
Size: 273KB - Virtual size: 272KB

.rdata2
Size: 512B - Virtual size: 100B

.rsrc
Size: 41KB - Virtual size: 40KB