454c042cb640f9d7df1da5e049a78b2e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

454c042cb640f9d7df1da5e049a78b2e_JaffaCakes118
Size

209KB
MD5

454c042cb640f9d7df1da5e049a78b2e
SHA1

65df71d4441b272405408a69ed1f32cc96c7498c
SHA256

cb6734b24bd8e80cb8751d2fe237f54695f7b2dc8f80a7ec86dff0f3fc5169cf
SHA512

bb582ca8802fc7325461663f44201b4ff44bceb3eb6dad7d9ba461c5981df2a7faba81d70e20704918f49bcf5926f460a3ba19f8dcd415b5e0e0aaa273bce30d
SSDEEP

3072:igpPmcGcNJT03xWcqsmb4fJco/aEAGH8YloM9Lo5cQESnZnrORTGK47I:igpuzqsmb4WoBSMNoHZna9X

Score

1^/10

Malware Config

Signatures

Files

454c042cb640f9d7df1da5e049a78b2e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

185b008defde3783199f9d4c1ed91465

Code Sign

63:23:f9:a3:70:1b:b7:9e:47:14:5e:03:a5:fe:a3:00
Certificate

Issuer

CN=1312DGCA23CE2B2D2A1FHEH11F231B2F23E3F1B12CFBGHD2F1G3CAHDHC3FGHACD1C1GAGC3HCCDAHGDG11HFGCH32B3GA1GECC3EBDA1BB3A2FDDEAHADBHF33HECDFAF22CAA13BHDAHHHCCDCCCCA2FD3EEGAH2BGC23CH31H323FECDBBAG2BH32DHDDGBA3AEHFHC2BCCGGAB3HH2B2DH11B21G3AGFFACADFED2BBADG1C3CDFFDBB22CD2ADDCG2BDDFGDDFBFBBC1BGH2HEHGB1AH2AEBABGC2C1H1HD1B3EE2CCEEGCBE3GHHGA2C1AHF31FBCAEBFF1CBFFEGH3AEHBADFF2AFFEGH3EGD2DAFAEAECC2C2HEGEA1FHEC3DG3GF2AGF2EFD3GH1DBABDBD123GGGA23BF3FCFDF2F1222HFCC12EEE2F1G11DEB2HCFHHDFDH11GBD1CF1F22C221HGDFDGHFC22CD2AEBE1CD1GC3333GD3H21D1BEB3GCHEFBAGF1H133FEC1C3C2EDGFCD2D3FE3FE1H1C2G3CAH3AG332C12BD123FBF212BA1BB3C1F1EEAEDDFEG2AFG1DBDAEBAC1AGBEC233EBGFCHH2B2GCECECEE22DHAA2CBBAAE23CHCCD3CFCG31DB11GGBCCH2HB3G1DGH3DC123BDFFFFA12CDCDEGFA1GHBB2E23HF12ED3DCDA332BF1EAHEEHEDFE1AC31DH33GF1HBH3FEC11G132CAFCFBFHEGBF1GDFGGCE2H2BGBF1A1B3GGBGG2CHF1AA1CFHG211GG11AGCGDFHGGFH1FED11ACGHFC2D3BFEGCCGCHGBF3EEDHADDG1C2E313CAFEH1BGCCCD31BBABF1CEHH3BA2ABA1CDD3EBD3GED3GC2FCCHGA3CDDH12AGE12HDGGGD1DDGE32EB23A3DF3GF1BH2CDEB2BEDEE3CE2DHG1EBH3A23CGG1CFEDD11H1HAED1D3DD331DFHAA13GCEBEGDHE1H1F11HAEGDEBH22FD3CF2C21A3CCGCF1HH2CB32GAGA3AHEB3G1AGBDDGEGA1GF31311BBBH22BHAAGC2FAG1EBHAFH1AHHA22DEEH313BA12ABDGF23HADBGB3C31FE3133BDCFGCDGGE2HGDDDDHH1CBBF1H2CB2D23CED2A21G1BCEG12AAGCDDDHBE1BECDCBBAC3C3A2 1BGG2HBAGE 1BGG2HBAGE

Not Before

26/11/2012, 12:42

Not After

31/12/2039, 23:59

Subject

CN=1312DGCA23CE2B2D2A1FHEH11F231B2F23E3F1B12CFBGHD2F1G3CAHDHC3FGHACD1C1GAGC3HCCDAHGDG11HFGCH32B3GA1GECC3EBDA1BB3A2FDDEAHADBHF33HECDFAF22CAA13BHDAHHHCCDCCCCA2FD3EEGAH2BGC23CH31H323FECDBBAG2BH32DHDDGBA3AEHFHC2BCCGGAB3HH2B2DH11B21G3AGFFACADFED2BBADG1C3CDFFDBB22CD2ADDCG2BDDFGDDFBFBBC1BGH2HEHGB1AH2AEBABGC2C1H1HD1B3EE2CCEEGCBE3GHHGA2C1AHF31FBCAEBFF1CBFFEGH3AEHBADFF2AFFEGH3EGD2DAFAEAECC2C2HEGEA1FHEC3DG3GF2AGF2EFD3GH1DBABDBD123GGGA23BF3FCFDF2F1222HFCC12EEE2F1G11DEB2HCFHHDFDH11GBD1CF1F22C221HGDFDGHFC22CD2AEBE1CD1GC3333GD3H21D1BEB3GCHEFBAGF1H133FEC1C3C2EDGFCD2D3FE3FE1H1C2G3CAH3AG332C12BD123FBF212BA1BB3C1F1EEAEDDFEG2AFG1DBDAEBAC1AGBEC233EBGFCHH2B2GCECECEE22DHAA2CBBAAE23CHCCD3CFCG31DB11GGBCCH2HB3G1DGH3DC123BDFFFFA12CDCDEGFA1GHBB2E23HF12ED3DCDA332BF1EAHEEHEDFE1AC31DH33GF1HBH3FEC11G132CAFCFBFHEGBF1GDFGGCE2H2BGBF1A1B3GGBGG2CHF1AA1CFHG211GG11AGCGDFHGGFH1FED11ACGHFC2D3BFEGCCGCHGBF3EEDHADDG1C2E313CAFEH1BGCCCD31BBABF1CEHH3BA2ABA1CDD3EBD3GED3GC2FCCHGA3CDDH12AGE12HDGGGD1DDGE32EB23A3DF3GF1BH2CDEB2BEDEE3CE2DHG1EBH3A23CGG1CFEDD11H1HAED1D3DD331DFHAA13GCEBEGDHE1H1F11HAEGDEBH22FD3CF2C21A3CCGCF1HH2CB32GAGA3AHEB3G1AGBDDGEGA1GF31311BBBH22BHAAGC2FAG1EBHAFH1AHHA22DEEH313BA12ABDGF23HADBGB3C31FE3133BDCFGCDGGE2HGDDDDHH1CBBF1H2CB2D23CED2A21G1BCEG12AAGCDDDHBE1BECDCBBAC3C3A2 1BGG2HBAGE 1BGG2HBAGE

Extended Key Usages

ExtKeyUsageCodeSigning

2b:52:2e:aa:ba:4c:3d:7e:68:6c:aa:2c:0d:8e:5e:33:ef:2e:a0:63
Signer

Actual PE Digest

2b:52:2e:aa:ba:4c:3d:7e:68:6c:aa:2c:0d:8e:5e:33:ef:2e:a0:63

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
lstrcatA
QueryPerformanceCounter
SetLastError
LocalFree
GetWindowsDirectoryA
CreateFileA

user32

DestroyMenu
DestroyWindow
DispatchMessageA
EnableMenuItem
GetCursorPos
GetDesktopWindow
GetForegroundWindow
GetSubMenu
DestroyIcon
LoadIconA
LoadMenuA
LoadStringA
MsgWaitForMultipleObjects
PeekMessageA
PostQuitMessage
RegisterClassA
RemoveMenu
SetFocus
SetForegroundWindow
SetTimer
SystemParametersInfoA
TrackPopupMenuEx
TranslateMessage
wsprintfA
DefWindowProcA
CreateWindowExA
CharNextA
KillTimer

advapi32

RegOpenKeyW

shell32

Shell_NotifyIconA

msvcrt

_except_handler3
_vsnwprintf
_wmakepath
_wsplitpath
_wtoi
free
malloc
memmove
setlocale
swscanf

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

185b008defde3783199f9d4c1ed91465

Code Sign

63:23:f9:a3:70:1b:b7:9e:47:14:5e:03:a5:fe:a3:00Certificate

Extended Key Usages

2b:52:2e:aa:ba:4c:3d:7e:68:6c:aa:2c:0d:8e:5e:33:ef:2e:a0:63Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msvcrt

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 200B

.text Size: 165KB - Virtual size: 164KB

.rsrc Size: 29KB - Virtual size: 28KB

.reloc Size: 1024B - Virtual size: 820B

63:23:f9:a3:70:1b:b7:9e:47:14:5e:03:a5:fe:a3:00
Certificate

2b:52:2e:aa:ba:4c:3d:7e:68:6c:aa:2c:0d:8e:5e:33:ef:2e:a0:63
Signer

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 200B

.text
Size: 165KB - Virtual size: 164KB

.rsrc
Size: 29KB - Virtual size: 28KB

.reloc
Size: 1024B - Virtual size: 820B