82216fc16e04654e10dbdf8571321c52_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

82216fc16e04654e10dbdf8571321c52_JaffaCakes118
Size

175KB
MD5

82216fc16e04654e10dbdf8571321c52
SHA1

69a30bdb285be7fe91130f11cd076e0bd29bef6d
SHA256

f4f3d5db95558049aea2697270c52a0ddceb6010fba83f5b3902762bcf178f15
SHA512

befa86c074e3fcbdf6999a7d874d4638cb23ad2895baeb1a1a2cec3dee63fcab83f334e04a992714fe7cf652cfce2ad8bcb9701ebb47d66aec43a75e6f34adf0
SSDEEP

3072:sxXqiXN+RQhmxZ34WlRoDHx4gOA/6EWpWff:U9XmZoWlRoDDO46EoWff

Score

1^/10

Malware Config

Signatures

Files

82216fc16e04654e10dbdf8571321c52_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3291c1991d6fa7e5027bacb87580045f

Code Sign

01:53:45:36:48:34:a4:6c:bd:50:c7:3a:5e:f3:e8:b0
Certificate

Issuer

CN=bbbbbbbbbbbbbbbbbbbbbbbbbbbbbb p2Kxxl14bgzMAsxrCcJvybqkwBmxinnrqAz36i8Ibth4Jfcy9LhpotmKe5ElaFDdd9itF3s4IbHtaImlgqK1DpiDKGLJd9K3qhLcG18 F8JdiswAHbKyblLr7GKckqvdIecnCIpnJq5CdJ j5mHkmrlhDjizCd3 tGBojm9simxq8C9DKu9im jBCAlHyLtCtc5HaaGgwKgLwH Eunwtif8Ga HixH2zrymq5ry84luylMCzsDsw3fmf 1MKnysk5sywAnMkqjpml61lkoFwuceieK5qEkEjxen64xpJolJfehnmfqtaeebCjKLKxl1Dgr C zidMM1wH5LMkCBmrg2 bGuLL2Dw6jgne8HIGt4mdJlF2ABJtHG xmwexJ22MEIfgduAn7 Jy pme6ukCDA7qLBz2Jt2fF7 41vIwp5yvvi77jHG2j7qpiibkH4JCegj9CkB2flx2ps3cqyjfd 7an9JCHdk 6kadj9 7f5JLri1HqALkm 1KLvadFrJ1JLn8MzjA8MugqweBAm3grfI2m 6nu97C545LiJ66vAeKECFhtDGvALAhsM9LeMaG7xhBzG1ims3 irtvrqmj5bcLHG5jdA6fph3n4Gvar5eiybuIbM8EJ Gh6fpquiiCfndi jHAknot r4BdM5iremB96okHgrbE9sxc vH1twIzy6euBdywGp y21bdeHH2uC6va Fter7snoIpI2uztjJ8d4wrl1q83dz4luJe pK2jqgmfha4Abfk42zGtflEy2sMohqj g2dt33bnv 22aLp7b5zbvrK5fHG76k4 j3A8GM w2xbktdyMf7borsl3gfl173x1t5izeL7Ehyv9uI3wxGIJAIih11J Ktldi3 bfexBvxL7rF6brHsu2t1nDcy oy4vyG3LHBfBe15u1kaJvD1FAnuaHKr7353HFl7BsrAythhJpjrxMfiLmFf5oJ5r6uvEmG9y4gFCgkeEdI2hE6JkfpmyffmkrxAEnqkJ2mi35cBtjrH3l j5sD kHLKs9mr3M5wwpDBd8so1hxB3ebgKfp9xBwj53ftabhzfM Kz8o1HteLgC691uD7hrHoqarmfz8l47Jqr3qi8wK3oje7wvfrnEMn4ah4fiwlpzjBkBw7DF7HrDnytrKCMIIai65wpidIm kvFmMlFiDyB3zz9rMm8FhfuL bln2yfy4Diy7HMLDqdb1Es7CrEr KsfuF2BqJkfF2l26ugJc2bjwme2CLeCKABkwAdvlL1Ds pMytD8C4z6ExhqskmK4vKx4DA6xhBJz4AHiijIjk5x3H1pDznjECJdxu kAChCy eHbIgsqtxrc HFn5pukosm4kn3dM9BuMchHxfDkxztaKxpGz4cBp5pugF8I5anryxqI5oM Mkq5rmh3v4cEH6zmtbKfrrAl7s87DxA7EmswwEDoLHHkJdksz3tM576JjJLioiI9fxow5vBEJk3gckCKnu1i6yxidvuEfwtxnGsbKazGww9i9b4a93vBugA61sIwegeza2vKpf6dJ9prffe1ip8lAvbHgu lF5KloGEuuL8Kbhafl AvoLtzjMIu7pCEAbJJukva9vmI iLlIDavMfkHdLb4mbxlLecGIm9BueapmoEL5Ivnuupc2nb o7AIxlri4 1c3f4tgjDLBm2zd vgzt3Luxd8LxHI31u LqAoi 7mvCL78bD581ux3HvCM3BanEsMjnhdwF5o1MngoziyyzokaxsHDIfrqCKx4e49rAyIBfgllxHckELgkKLcyxd9 Dkkq5Hby 5u3MjictBbH5maMkD ILG 6wA7qqEFFlGvkgke7Ii3p9M5soMD9A M6v87oqoE3H5c99HbjBbmfzd2Buk1nCGMz4 v9vh2kxCBF2aHeJAa6jssBH65EA4fpMb9DdpzyIFvmis1eynkcyF1onMhrKl8uAr aaaaaaaaaaaaaaaaaaaaaaa

Not Before

09-01-2013 13:12

Not After

31-12-2039 23:59

Subject

CN=bbbbbbbbbbbbbbbbbbbbbbbbbbbbbb p2Kxxl14bgzMAsxrCcJvybqkwBmxinnrqAz36i8Ibth4Jfcy9LhpotmKe5ElaFDdd9itF3s4IbHtaImlgqK1DpiDKGLJd9K3qhLcG18 F8JdiswAHbKyblLr7GKckqvdIecnCIpnJq5CdJ j5mHkmrlhDjizCd3 tGBojm9simxq8C9DKu9im jBCAlHyLtCtc5HaaGgwKgLwH Eunwtif8Ga HixH2zrymq5ry84luylMCzsDsw3fmf 1MKnysk5sywAnMkqjpml61lkoFwuceieK5qEkEjxen64xpJolJfehnmfqtaeebCjKLKxl1Dgr C zidMM1wH5LMkCBmrg2 bGuLL2Dw6jgne8HIGt4mdJlF2ABJtHG xmwexJ22MEIfgduAn7 Jy pme6ukCDA7qLBz2Jt2fF7 41vIwp5yvvi77jHG2j7qpiibkH4JCegj9CkB2flx2ps3cqyjfd 7an9JCHdk 6kadj9 7f5JLri1HqALkm 1KLvadFrJ1JLn8MzjA8MugqweBAm3grfI2m 6nu97C545LiJ66vAeKECFhtDGvALAhsM9LeMaG7xhBzG1ims3 irtvrqmj5bcLHG5jdA6fph3n4Gvar5eiybuIbM8EJ Gh6fpquiiCfndi jHAknot r4BdM5iremB96okHgrbE9sxc vH1twIzy6euBdywGp y21bdeHH2uC6va Fter7snoIpI2uztjJ8d4wrl1q83dz4luJe pK2jqgmfha4Abfk42zGtflEy2sMohqj g2dt33bnv 22aLp7b5zbvrK5fHG76k4 j3A8GM w2xbktdyMf7borsl3gfl173x1t5izeL7Ehyv9uI3wxGIJAIih11J Ktldi3 bfexBvxL7rF6brHsu2t1nDcy oy4vyG3LHBfBe15u1kaJvD1FAnuaHKr7353HFl7BsrAythhJpjrxMfiLmFf5oJ5r6uvEmG9y4gFCgkeEdI2hE6JkfpmyffmkrxAEnqkJ2mi35cBtjrH3l j5sD kHLKs9mr3M5wwpDBd8so1hxB3ebgKfp9xBwj53ftabhzfM Kz8o1HteLgC691uD7hrHoqarmfz8l47Jqr3qi8wK3oje7wvfrnEMn4ah4fiwlpzjBkBw7DF7HrDnytrKCMIIai65wpidIm kvFmMlFiDyB3zz9rMm8FhfuL bln2yfy4Diy7HMLDqdb1Es7CrEr KsfuF2BqJkfF2l26ugJc2bjwme2CLeCKABkwAdvlL1Ds pMytD8C4z6ExhqskmK4vKx4DA6xhBJz4AHiijIjk5x3H1pDznjECJdxu kAChCy eHbIgsqtxrc HFn5pukosm4kn3dM9BuMchHxfDkxztaKxpGz4cBp5pugF8I5anryxqI5oM Mkq5rmh3v4cEH6zmtbKfrrAl7s87DxA7EmswwEDoLHHkJdksz3tM576JjJLioiI9fxow5vBEJk3gckCKnu1i6yxidvuEfwtxnGsbKazGww9i9b4a93vBugA61sIwegeza2vKpf6dJ9prffe1ip8lAvbHgu lF5KloGEuuL8Kbhafl AvoLtzjMIu7pCEAbJJukva9vmI iLlIDavMfkHdLb4mbxlLecGIm9BueapmoEL5Ivnuupc2nb o7AIxlri4 1c3f4tgjDLBm2zd vgzt3Luxd8LxHI31u LqAoi 7mvCL78bD581ux3HvCM3BanEsMjnhdwF5o1MngoziyyzokaxsHDIfrqCKx4e49rAyIBfgllxHckELgkKLcyxd9 Dkkq5Hby 5u3MjictBbH5maMkD ILG 6wA7qqEFFlGvkgke7Ii3p9M5soMD9A M6v87oqoE3H5c99HbjBbmfzd2Buk1nCGMz4 v9vh2kxCBF2aHeJAa6jssBH65EA4fpMb9DdpzyIFvmis1eynkcyF1onMhrKl8uAr aaaaaaaaaaaaaaaaaaaaaaa

Extended Key Usages

ExtKeyUsageCodeSigning

34:11:e6:02:23:07:eb:08:5f:ab:16:c2:d3:36:d3:c4:8d:a0:fc:d9
Signer

Actual PE Digest

34:11:e6:02:23:07:eb:08:5f:ab:16:c2:d3:36:d3:c4:8d:a0:fc:d9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileW
CreateFileW
CreateProcessW
CreateThread
DeleteFileW
ExitProcess
ExpandEnvironmentStringsW
FileTimeToDosDateTime
FileTimeToLocalFileTime
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetSystemTimeAsFileTime
VirtualAllocEx
HeapAlloc
HeapFree
LocalAlloc
LocalFree
QueryPerformanceCounter
SetCurrentDirectoryA
SetErrorMode
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
GetTickCount
ReadFile

user32

LoadIconA
GetSysColor
RegisterClassExA
LoadCursorA
LoadCursorW

advapi32

RegOpenKeyA

msvcrt

memset
_XcptFilter
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_ftol
_initterm
_ltow
_wcslwr
_wfopen
_wfullpath
_wsplitpath
exit
fclose
floor
fwprintf
swprintf
wcsncpy
wcsstr

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3291c1991d6fa7e5027bacb87580045f

Code Sign

01:53:45:36:48:34:a4:6c:bd:50:c7:3a:5e:f3:e8:b0Certificate

Extended Key Usages

34:11:e6:02:23:07:eb:08:5f:ab:16:c2:d3:36:d3:c4:8d:a0:fc:d9Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Sections

.text Size: 4KB - Virtual size: 4KB

.text2 Size: 512B - Virtual size: 100B

.data Size: 98KB - Virtual size: 97KB

.rdata3 Size: 512B - Virtual size: 100B

.rdata2 Size: 512B - Virtual size: 100B

.rsrc Size: 58KB - Virtual size: 57KB

01:53:45:36:48:34:a4:6c:bd:50:c7:3a:5e:f3:e8:b0
Certificate

34:11:e6:02:23:07:eb:08:5f:ab:16:c2:d3:36:d3:c4:8d:a0:fc:d9
Signer

.text
Size: 4KB - Virtual size: 4KB

.text2
Size: 512B - Virtual size: 100B

.data
Size: 98KB - Virtual size: 97KB

.rdata3
Size: 512B - Virtual size: 100B

.rdata2
Size: 512B - Virtual size: 100B

.rsrc
Size: 58KB - Virtual size: 57KB