9e70d5f3986851c9ff4a9cfed31fd9a5_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

9e70d5f3986851c9ff4a9cfed31fd9a5_JaffaCakes118
Size

2.4MB
MD5

9e70d5f3986851c9ff4a9cfed31fd9a5
SHA1

3be690ce135b0835d374c8d0bb96be4c9faf483f
SHA256

9274e1c3d9423ff83b6da773441148f487a9b4f5f54aa0f3d25266edad2e1219
SHA512

50e4a22e56f37b4cbded882c70b37e6a4267fb8632dad97937cd58ed47fbc011f3e66409cfd85a23dd6d5cb650e3bc8364b14f5f4e844ffb3295640969d1f3a7
SSDEEP

49152:aUax0MDAvfCWKsOOSWAVlPMvclqcvCQLKgAC0kX:XZMDAn0sHSWAVlUvcscvCQ/

Score

1^/10

Malware Config

Signatures

Files

9e70d5f3986851c9ff4a9cfed31fd9a5_JaffaCakes118
.exe windows:6 windows x86 arch:x86

96295a1715c398aa332a59601fe47b6d

Code Sign

11:10:3f:65:46:b6:4e:fe:8b:f3:e2:f4:9d:c5:8d:de
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

30-09-2020 00:00

Not After

30-09-2021 23:59

Subject

CN=DISCOUNT MART INC,O=DISCOUNT MART INC,POSTALCODE=10462,STREET=2179 Westchester Ave,L=Bronx,ST=New York,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:06:eb:e9:73:3a:1b:81:64:f8:a2:ba:e2:ab:c9:a7:bf:2f:c4:f0
Signer

Actual PE Digest

4e:06:eb:e9:73:3a:1b:81:64:f8:a2:ba:e2:ab:c9:a7:bf:2f:c4:f0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\45\46\Rich\Cold\42\Stood\52\89\six\Only\Joy\PictureSheet.pdb

Imports

kernel32

ReadFile
SetEndOfFile
SetFilePointer
GetFullPathNameA
WriteFile
DuplicateHandle
GetCurrentProcess
LoadLibraryExA
lstrcmpiA
GetVolumeInformationA
GlobalFlags
GetVersionExA
GetLocaleInfoW
GetUserDefaultUILanguage
GetOEMCP
GetCPInfo
FileTimeToLocalFileTime
GetFileAttributesA
GetFileAttributesExA
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
GetACP
lstrcpyA
FindResourceExW
VerSetConditionMask
VerifyVersionInfoA
GetTickCount
GetProfileIntA
SearchPathA
GetTempFileNameA
GetUserDefaultLCID
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
CompareStringW
LCMapStringW
GetStringTypeW
RtlUnwind
VirtualAlloc
VirtualQuery
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
HeapQueryInformation
GetCommandLineA
GetCommandLineW
QueryPerformanceFrequency
SetStdHandle
GetFileType
ExitProcess
GetStdHandle
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
CreateFileW
GetFileSize
FlushFileBuffers
FindFirstFileA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
EncodePointer
FileTimeToSystemTime
GlobalGetAtomNameA
lstrcmpA
CompareStringA
ResumeThread
SetThreadPriority
GetCurrentThreadId
WaitForSingleObject
CloseHandle
MultiByteToWideChar
CopyFileA
FormatMessageA
MulDiv
GlobalSize
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleFileNameA
GetCurrentProcessId
LocalFree
LocalReAlloc
LocalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalAlloc
TlsFree
TlsSetValue
InitializeCriticalSection
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
SetLastError
OutputDebugStringA
LockFile
TlsGetValue
FindFirstChangeNotificationA
GetProcessHeap
DeleteCriticalSection
RemoveDirectoryA
DecodePointer
HeapAlloc
GetWindowsDirectoryA
GetSystemInfo
RaiseException
HeapReAlloc
TlsAlloc
CreateFileA
GetLastError
GetTempPathA
Sleep
HeapSize
lstrcatA
GetCurrentDirectoryA
FindClose
InitializeCriticalSectionAndSpinCount
HeapFree
UnlockFile
VirtualProtect

user32

DrawEdge
DrawFrameControl
IsZoomed
LoadMenuW
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageA
WaitMessage
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
CopyAcceleratorTableA
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuA
RegisterClipboardFormatA
CharUpperBuffA
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
GetWindowRgn
DestroyCursor
SetTimer
DeleteMenu
SetCursor
ShowOwnedPopups
LoadImageW
InvalidateRect
TrackMouseEvent
IntersectRect
MapDialogRect
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
PostQuitMessage
OffsetRect
SetRectEmpty
CopyImage
SystemParametersInfoA
InflateRect
GetMenuItemInfoA
DestroyMenu
FillRect
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
RealChildWindowFromPoint
GetDesktopWindow
ClientToScreen
CharUpperA
DestroyIcon
IsDialogMessageA
SetWindowTextA
SendDlgItemMessageA
CheckDlgButton
SetWindowRgn
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
GetWindow
GetTopWindow
GetClassLongA
SetWindowLongA
PtInRect
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
EndPaint
BeginPaint
SetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
EndDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
PostMessageA
GetMessageTime
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
GetWindowTextLengthA
LoadCursorA
GetSysColorBrush
GetSysColor
ReleaseDC
GetSystemMetrics
CallNextHookEx
SetWindowsHookExA
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageA
DispatchMessageA
GetMessageA
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongA
IsWindowEnabled
EnableWindow
SendMessageA
UnhookWindowsHookEx
SetParent
SetClassLongA
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
EnumDisplayMonitors
OpenClipboard
SetLayeredWindowAttributes
GetKeyNameTextA
MapVirtualKeyA
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
LoadCursorW
InvertRect
HideCaret
EnableScrollBar
MessageBeep
GetIconInfo
DrawIconEx
LoadImageA
IsRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
MoveWindow
KillTimer
DeferWindowPos
UnregisterHotKey
GetMessagePos
GetDC
EnumChildWindows
GetClassNameA
BeginDeferWindowPos
GetAsyncKeyState
RegisterWindowMessageA
GetWindowTextA
MessageBoxA
TranslateMessage
CreateMenu
FindWindowA
UpdateWindow
GetForegroundWindow

gdi32

Escape
ExcludeClipRect
RestoreDC
CreateFontIndirectA
Rectangle
StartDocA
StartPage
ExtTextOutA
DPtoLP
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
CreateSolidBrush
GetObjectA
SetTextColor
SetBkColor
CreateBitmap
GetDeviceCaps
CreateDCA
CopyMetaFileA
SetRectRgn
PatBlt
CreateRectRgnIndirect
CombineRgn
GetTextExtentPoint32A
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
DeleteObject
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
TextOutA
MoveToEx
DeleteDC
GetTextMetricsA
EnumFontFamiliesExA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceA

comctl32

ImageList_DragShowNolock
ImageList_DragLeave
ImageList_ReplaceIcon

comdlg32

GetOpenFileNameA
FindTextA
GetSaveFileNameA

advapi32

OpenThreadToken
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
SetSecurityDescriptorDacl
RegEnumKeyA
RegCloseKey
StartServiceCtrlDispatcherA
RegOpenKeyA
QueryServiceStatus
SetSecurityDescriptorOwner
RegQueryValueExA
AllocateAndInitializeSid
LookupPrivilegeValueA
SetServiceStatus
RegisterServiceCtrlHandlerA
OpenSCManagerA
RegCreateKeyExA
RegSetValueExA
OpenProcessToken
FreeSid
InitializeSecurityDescriptor
RegOpenKeyExA
OpenServiceA
SetSecurityDescriptorGroup

ole32

CoCreateInstance
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoInitializeEx
CreateStreamOnHGlobal
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
OleCreateMenuDescriptor
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
CoInitialize
OleLockRunning
RevokeDragDrop

oleaut32

VariantCopy
VariantChangeType
VarBstrFromDate
VariantInit
SysAllocString
SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
SysStringLen
LoadTypeLi
SysAllocStringByteLen
VariantClear

userenv

EnterCriticalPolicySection
DestroyEnvironmentBlock
ExpandEnvironmentStringsForUserA
CreateEnvironmentBlock

wtsapi32

WTSLogoffSession
WTSQueryUserToken
WTSOpenServerA
WTSCloseServer

uxtheme

OpenThemeData
GetThemePartSize
GetThemeColor
GetCurrentThemeName
GetWindowTheme
IsAppThemed
GetThemeSysColor
DrawThemeParentBackground
GetThemeFont
DrawThemeText
DrawThemeBackground
CloseThemeData
GetThemeBackgroundRegion
IsThemeBackgroundPartiallyTransparent

mpr

WNetGetUniversalNameA
WNetGetConnectionA
WNetGetUserA

msimg32

GradientFill
TransparentBlt
AlphaBlend

tapi32

lineAccept
lineNegotiateAPIVersion
lineInitialize
lineTranslateDialogA
lineTranslateAddressA
lineClose
lineOpenA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

shell32

ShellExecuteA
SHGetPathFromIDListA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
SHBrowseForFolderA
DragQueryFileA
DragFinish

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

gdiplus

GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipDeleteGraphics
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipDrawImageRectI
GdipSetInterpolationMode
GdipGetImagePixelFormat

shlwapi

PathIsUNCA
PathStripToRootA
PathFindExtensionA
PathRemoveFileSpecW
StrFormatKBSizeA
PathFindFileNameA

winmm

PlaySoundA

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

96295a1715c398aa332a59601fe47b6d

Code Sign

11:10:3f:65:46:b6:4e:fe:8b:f3:e2:f4:9d:c5:8d:deCertificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

4e:06:eb:e9:73:3a:1b:81:64:f8:a2:ba:e2:ab:c9:a7:bf:2f:c4:f0Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comctl32

comdlg32

advapi32

ole32

oleaut32

userenv

wtsapi32

uxtheme

mpr

msimg32

tapi32

winspool.drv

shell32

oleacc

gdiplus

shlwapi

winmm

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.data Size: 39KB - Virtual size: 1.0MB

.idata Size: 16KB - Virtual size: 16KB

.rsrc Size: 94KB - Virtual size: 93KB

.reloc Size: 134KB - Virtual size: 134KB

11:10:3f:65:46:b6:4e:fe:8b:f3:e2:f4:9d:c5:8d:de
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

4e:06:eb:e9:73:3a:1b:81:64:f8:a2:ba:e2:ab:c9:a7:bf:2f:c4:f0
Signer

.text
Size: 2.1MB - Virtual size: 2.1MB

.data
Size: 39KB - Virtual size: 1.0MB

.idata
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 94KB - Virtual size: 93KB

.reloc
Size: 134KB - Virtual size: 134KB