JaffaCakes118_627621c28b1f34c8d9389cd0b8f91d0d

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_627621c28b1f34c8d9389cd0b8f91d0d
Size

201KB
MD5

627621c28b1f34c8d9389cd0b8f91d0d
SHA1

1250855cd6f042b64dcdad11c60b8f0d6ce542b9
SHA256

2c7e2706fbecae1b16aa947be68e5b9b1053cbf57ad8447e57ed922dcc22ee67
SHA512

2a8daf8205a5de94cff2bf639ab541bc53edc1e1fb8d1d704db83ad42f353374ab0edac197d49f50bd71b8435c30e13bd7f976dc2b3576d2a64c2a7d219e2373
SSDEEP

3072:/f5+d4KAdOu6zbahkfyQRF9Tqa1pLXmbq5EWhd+:/x+RxuoUkrH9z5E5

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_627621c28b1f34c8d9389cd0b8f91d0d
.exe windows:5 windows x86 arch:x86

298753736042f375f75e7d0850035c36

Code Sign

7a:2d:d4:0a:af:f1:8f:75:b0:49:17:ff:32:fb:92:56
Certificate

Issuer

CN=2 BEDKDJGCMC9KC7KJH8G8EIEGGHKB78E78MD6KLEIH7697AHM9CMHGMA7D9598B7IJC6KBHJF6GFLFL9JEI9F6C9LBFBA6KAILG9FAGAILJMF88F8CFA6CH7LEM8F5EFDFKBAFAGA5ALGIGK76669LAFBF9BLG9DHLM75I8FHE8AA5GL5GJ8JEJ9J5J6KE5BA99LA6KDFG5HF8GHCEKCBHIE6ICMKGJHF5H7GBMLLGMJ987589L69HKJ9GE66JGF7JFLA87757HLLFGEGE6MFCHDIJ7JCCD9JDMF9JMCAJCGJGIJ8887AALF9FGMFFCHGJ95BM9KGCL5785BF8C66FBBGA6L8LFL5MDD79HF66BFIJ6GJJEJC6HI8FM8DJ7IG99DMJ5E5KG6CIEK98JFD9HGB7BLEB7LDLE6MC6F665JDI7BDM87CA8LMJKE79K8HFMJ8EHD98BC9DD8BHLGM5M97HGK5IE5LMHD8BGKGK75JMCC57MGIK5B65AAFKA5KLB9EHLCJJ87J6GLLAJ77L7HF55CMAFEFD9LDLBFEMME5BMGJ8ACA5BHDBFC8CHJEIMD57MIJEEGHLA9G75A7EEJMF8H55K6A7JC67H95FB5MECCHELLDEI8EFG85LFDI6GF8AEAJGCKLG9HFKGLHJM6KA98D88M89HAJHFMM9CH6BHG6M898IAD7KKDDM8F5CKA66LAJ6CB6DJDCG9ALCJCFFJ6LI556FDFMKF9H5597BCGKMLLJDGJJL6FEI86AJEH8MIGC6D5A7H987K9CALBHD5LHL9B7BCF98G95DCLCFGBBCBL9LJIDMHCGKIE7I8EEKBGHD7C7MA5FC7MC5FHDBFJCHAK8D995M8C7HBDKCJ7DIDJLMEGEHGAJBEKD9HKH8C58GBCIFBDI87AEIJME8EBBB6ID56L5J9KM956IL5JEIDGILI6KAA5CKHGKKECGK78MCIFGA7I8EBEKKJ76DFH8J5HHLHGFLB8J9ADLEKKCK9M6E995DD5EFKK8EGAKAALE68JLKDE78MC7EDEJ7JB7B556A8HBLCCCABKI9A6E56IJ7MLKDG7EMAM6KE9EC6FMDAF8CGJ78D9DA88KGKCMLEDC6B5H5K77C555FLKHFIFCEG8JMGGCAF6DK5B5G9KLM6KFJDAA9MJE7JEMMKFJKCALCB6BKJCH8D76EI6BCHDHM9JJ8KCH6LFJMHACL59AAM8F787BD5CDGGD9EDKC568B6LIGHGIEIFKJEA8AMGL7ADLAK8K8CMD7AC99H7CIL5DBAFLAEHILKEDCAKK5IEEMC7BA6AABFDEEGGLL6M5GJC9965HE5LBMAGKFJJH9FH8DC5IJFF9MBLCHHFHAL7ME6JMGABFELMJ69AJ67CAEAHM5H8CFKB895A9KIIMDG7A5A9A58IFC7FJIIKLDLII8D7KBMIHJ8CLICBF87CII5BJFI7IJHECEML77D9ECLHBE6EHDFJ6AJKFHJ9H9ELHI9IMJAM7EECFCFBI6BIMHK5KB6I69E67I8BGLAL7GID88GHFBBHDABH89MLFL9C5EILJIL55DEA5DI967HHL95JLAKC99M8IC77CA9788MMCE6MMAH76EBBDGFEG5JID7H97D5AL5ALMGCHM8G68KCB7JJMGK9EBEL7HIHECFL7LG99GC87IILIMEF7EMFKBKC5CH9JKKBBGAFGCHMAIC9H8J6J5EJ8BGMJ5BEA9MBF77AIG9M9GMD9G5ECABE5AEFLFHK6CCJEIBIGGC878AAD9JCKK8LLKGA8FE9ABKH976MAFMIGGM7FJLAFFCLAH9E65BD6HC9FE6JJFJ6LECMJ5GMDKA6KA6EG7CJG7AIHB5F8G9GIMJD9EAB7DKG68LM9GJ9988HAGBAGGH6CA7M9IIEFDKDGHLF6HDD7CKJKI7I8C69HC7E57LHAEL586G9GKLKF5EK5CD97GD7MECHL679DEBGDEI565HBMCGI9JMJF59J798J9HLIHKA57796MFMEFIJHDD97K5MFDIFJC88K7AHI5KCKD9HIK66KMCFD86HK5BEBKE5DD68LKFLJA8HK8CIJJ66KLFGA8MGHLIKEKIABC7EFI5CF5GB5D8GMAJ8F5LBJ7GBA8AAFG7C6DGB7LFHALLJ5IJ8HMJL8MME5G79HBB59KDDB9MLEIM7MGHIG7H96LDG855LCE769GAILHBDI5AIEDD8H68ADGF7DIAM955DB9AJMIAL8BAHKFM68M6DKGLMGGDH8KAE5E78C59A9KKIKFMBGCH8DFI8G7GB758IKKH5J8EKC97C9L98JFIG76C8E87KCFK5H9DBALB7BHK76797D8BFBK7FG8LL5FADC796JLLKLMMLBKFJGF6JCGMBC886J7EB6F9GIK877BMHGHGBEBIJ67MHAIFG5BCEM57DCE9B7EH859H5CMJIJ7M77L8GJCGJCGLIDIL89MDKD9MCI8KHJDLEJ9DMIDMDM55BEAMEKDKLDCGC8C8EKLCJ9L998JL5C9BMG75GGC5C7CH7ED9JBD7DIFKK9G59EM67F5ILCIC8B666HL5KFLG5HBL5D9GACDM6JMF75KLIF7HMIFKL79BDD6FI8M5C8CMLDKMDGKKDME8IM5GKECHLKKBJB7DB76GBAH88C7KGA69HIABCJCJLFG6GG85MK9J7HEDKJK656GDDHLI8I9L8IF7HADIDL9JFIBKDCD5CA8BJEMHAI56JBG759CEB7MAK7AD6K9GAJG8J56HMJJA6J7AD7F7BCHB5AC8A5G7M5MA5BCDLIICFD57J7BDEMDFH8LLI5MCC5AK5GG8KJMA8MHEB9B595GICFK9EMLDFEFMJ8LF85HE666KCL7C7M8AEKE5K8HM5KMGFG6G686JIIJK5CA5MCHK7L7GC85I78EJMDBIDEBFKMJHLGDA567G5DLGMG9877C8HGFH86LAC5HLH6ADHK76KJ8AJB87M6JGL55JHCMAHAEEHMEIHKI86MA5899GC5LG5JGIBMLIBBLJ67J778FBKEFLMEABLHMJF9IDAF6J8J6GJ5LG9AL9AJD66BH8KA9FEJBDAMLEAFH6CJG8GGB55IAEI9DGAL6A85KG6AJJ7GMKFBJE7L7AGLE7GI6C78I8MIA96F9FC8FKC6ACKM56EGHHDGEIMBHBIJ7MEAHE5FMF67LC9IAGIIALCJC8AC85DAEJCKIBB8JIAAG66CKK8JKCK9IK9MJMEDMBE5LGJIDGHMBJ9AMLE75IE986L9K9EFGDCBJJA5LKH97L5JEB9E9AA8KH58MDCA8CC76ALLDCDLKH5FM8EEADDFDM6BFDBAHMI7ACMF6ILBG8MC9KDCKDF58EE59IJB588M898A8HJHEE67J8KLECBDHBC6EKFEAFEIE5ECLDGEGHGLHC8G6CMKBMHM77FLB88BMH8EHJH96CCMC6MHBCHAM955GM9KD8D9B7GBFI6M5FAH6A8K59A8IBK5IF6LDCBFD9IK8HFBGJEF9EKHMIGMH5CE755FJMH78HEMHFLH7HGC6EHA5EK86BIHFB8H9C6CA7BMHGD5KHC59G7D78FILJIAJF69BIKEJ6K8CFC559LCLDDG89ECG8KLGDA95A88F5L7EDIMMFFJK6IL76IC8LEFMILMHJ6LFAICBK9J5MMDAMJ5L5EM7FL8F89KEE7IK8KMFFC7FDML559CFAFCDBM6B9IDML5BCJMGGMGB67LJCEE78MHBKJADACBE77K9A97HAIMALL8L97HKK67DAHE6B78KGCKDFDHBL6BFEEF8L5K6FFBHEDKACFFEHGIGDB86DCBDEK6IBFGJEA65HJC9G5AIK5885IECBIEKCC7K6KFGLMAFDKLH5E9KD7G7DAL9EB5AIJAML5M5L9BJ786LF7HA85975FHCE5L56CCHELMMJGJ6CHA 3

Not Before

20-12-2012 12:34

Not After

31-12-2039 23:59

Subject

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

Extended Key Usages

ExtKeyUsageCodeSigning

4d:71:75:ad:e6:29:3d:02:f5:97:aa:06:66:96:3a:ae:1a:ef:eb:3a
Signer

Actual PE Digest

4d:71:75:ad:e6:29:3d:02:f5:97:aa:06:66:96:3a:ae:1a:ef:eb:3a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatW
GetSystemDirectoryW
VirtualAllocEx
CreateFileW
LoadLibraryA
CloseHandle
GetCommandLineA
GetProcAddress

user32

LoadIconA

shell32

SHGetPathFromIDListW
SHGetFileInfoW
SHBrowseForFolderW
ShellExecuteW
SHGetSpecialFolderLocation

comctl32

PropertySheetW
CreateStatusWindowW

msvcrt

_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_wcsicmp
_wcsnicmp
exit
wcschr
wcsstr
memcpy

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

298753736042f375f75e7d0850035c36

Code Sign

7a:2d:d4:0a:af:f1:8f:75:b0:49:17:ff:32:fb:92:56Certificate

Extended Key Usages

4d:71:75:ad:e6:29:3d:02:f5:97:aa:06:66:96:3a:ae:1a:ef:eb:3aSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

comctl32

msvcrt

Sections

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 149KB - Virtual size: 148KB

.rsrc Size: 7KB - Virtual size: 6KB

7a:2d:d4:0a:af:f1:8f:75:b0:49:17:ff:32:fb:92:56
Certificate

4d:71:75:ad:e6:29:3d:02:f5:97:aa:06:66:96:3a:ae:1a:ef:eb:3a
Signer

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 149KB - Virtual size: 148KB

.rsrc
Size: 7KB - Virtual size: 6KB