JaffaCakes118_3028b2eb6d0aeb8a13291c7fa799ba8c39a9fa0c5af0abb56b34c903cb64741e

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_3028b2eb6d0aeb8a13291c7fa799ba8c39a9fa0c5af0abb56b34c903cb64741e
Size

727.2MB
MD5

500f99c4b067fe00c0abe21a92e755fe
SHA1

f5fea700fb2962e39afd5d709308d5a0ce2d3b82
SHA256

3028b2eb6d0aeb8a13291c7fa799ba8c39a9fa0c5af0abb56b34c903cb64741e
SHA512

8def4c0b4f3737f764a4c9b3e82f5470b6c9fd3739a896b662fe969bdc1b1b772dacb0bb2f47d43a7ab0e49806e12c2f845fe42e25f56fa9e03269893662c45d
SSDEEP

98304:eljPlq3JIvhwmpT6KCtB4ptE4kBCbJVr0uhK130g+XAFNAtN51pJxGmyo:elDloJIZwmd6KnjHr0cK1rLqN/pjGmyo

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_3028b2eb6d0aeb8a13291c7fa799ba8c39a9fa0c5af0abb56b34c903cb64741e
.exe windows:6 windows x86 arch:x86

0901266657d602fff9c7d9a865574642

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:fd:6f:28:a5:ee:da:a6:25:55:b6:4f:b8:cd:86:84
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

08/06/2016, 00:00

Not After

03/10/2018, 12:00

Subject

SERIALNUMBER=25923170,CN=SteelSeries ApS,O=SteelSeries ApS,POSTALCODE=2000,STREET=Dirch Passers Allé 27,L=Frederiksberg,C=DK,1.3.6.1.4.1.311.60.2.1.3=#1302444b,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/03/2017, 19:05

Not After

01/06/2018, 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7c:f6:2c:f5:be:23:b7:50:e5:02:3d:6c:01:9c:ef:fe:4f:c3:63:05:e3:45:37:9a:dc:e3:d7:33:5e:a9:d3:b8
Signer

Actual PE Digest

7c:f6:2c:f5:be:23:b7:50:e5:02:3d:6c:01:9c:ef:fe:4f:c3:63:05:e3:45:37:9a:dc:e3:d7:33:5e:a9:d3:b8

Digest Algorithm

sha256

PE Digest Matches

false

71:7a:51:07:0a:eb:46:19:70:2b:39:48:13:20:1b:19:cb:75:b8:90
Signer

Actual PE Digest

71:7a:51:07:0a:eb:46:19:70:2b:39:48:13:20:1b:19:cb:75:b8:90

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

CharUpperBuffW

Sections

.text
Size: - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jq#
Size: - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.8Da
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sXp
Size: 6.8MB - Virtual size: 6.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 403KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0901266657d602fff9c7d9a865574642

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7Certificate

Key Usages

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14Certificate

Extended Key Usages

Key Usages

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

0d:fd:6f:28:a5:ee:da:a6:25:55:b6:4f:b8:cd:86:84Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43Certificate

Extended Key Usages

61:0b:aa:c1:00:00:00:00:00:09Certificate

Key Usages

7c:f6:2c:f5:be:23:b7:50:e5:02:3d:6c:01:9c:ef:fe:4f:c3:63:05:e3:45:37:9a:dc:e3:d7:33:5e:a9:d3:b8Signer

71:7a:51:07:0a:eb:46:19:70:2b:39:48:13:20:1b:19:cb:75:b8:90Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: - Virtual size: 39KB

.rdata Size: - Virtual size: 5KB

.data Size: - Virtual size: 3KB

.CRT Size: - Virtual size: 4B

.jq# Size: - Virtual size: 3.8MB

.8Da Size: 1024B - Virtual size: 872B

.sXp Size: 6.8MB - Virtual size: 6.8MB

.reloc Size: 2KB - Virtual size: 1KB

.rsrc Size: 403KB - Virtual size: 402KB

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

0d:fd:6f:28:a5:ee:da:a6:25:55:b6:4f:b8:cd:86:84
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

7c:f6:2c:f5:be:23:b7:50:e5:02:3d:6c:01:9c:ef:fe:4f:c3:63:05:e3:45:37:9a:dc:e3:d7:33:5e:a9:d3:b8
Signer

71:7a:51:07:0a:eb:46:19:70:2b:39:48:13:20:1b:19:cb:75:b8:90
Signer

.text
Size: - Virtual size: 39KB

.rdata
Size: - Virtual size: 5KB

.data
Size: - Virtual size: 3KB

.CRT
Size: - Virtual size: 4B

.jq#
Size: - Virtual size: 3.8MB

.8Da
Size: 1024B - Virtual size: 872B

.sXp
Size: 6.8MB - Virtual size: 6.8MB

.reloc
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 403KB - Virtual size: 402KB