JaffaCakes118_bd66a6eee0bf02dd7fcf60d45829f644

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_bd66a6eee0bf02dd7fcf60d45829f644
Size

255KB
MD5

bd66a6eee0bf02dd7fcf60d45829f644
SHA1

705146b1b24343bc39273e77d25fcbbd0c1de19f
SHA256

2b891e8f9664e1840cce0a586c32a64cb6783e049954a635e3cb395035c182ed
SHA512

433107b59a55e9fbc9a3c397e926e72f4c4421a698b07c36fd026d46251e6035514c35eb4293c0a94b7fb717651b98780bb053e867fc73d20dd4eb6797326760
SSDEEP

3072:hrKfG3M1m58rYF62sSDxAhJi1psGNRz9DHLsRY/DWOJolPOSIgcs9ll7EvPFF7qV:hrK+3M1m58rA6rIsGHxD4RmcFH7KSzxv

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_bd66a6eee0bf02dd7fcf60d45829f644
.exe windows:4 windows x86 arch:x86

28a4c6cd3e66616a4a923b8fd3ab7c6c

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5e:75:e9:97:f3:d7:0b:b8:c1:82:d5:6b:25:b7:d8:36
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

19/12/2011, 00:00

Not After

18/12/2014, 23:59

Subject

CN=Primetech Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Primetech Ltd.,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
LoadLibraryW
SetUnhandledExceptionFilter
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
Sleep
IsDebuggerPresent
CreateMutexA
GetProcAddress
LoadLibraryA

netapi32

NetGetJoinableOUs

rasman

RasSetEapUserInfo

user32

SetWindowLongW
ShowCaret
GetMenu
CreateAcceleratorTableW
CopyRect
FindWindowW
MessageBoxW
CreateDesktopW
UnregisterClassW
GetMessageA
GetKeyboardLayout
ShowCursor
IsIconic
WinHelpA
SetParent
CreateDialogIndirectParamA
DialogBoxIndirectParamA
IsChild
SetWindowPos
GetSystemMetrics
RegisterClassW
wsprintfA
GetDesktopWindow
EndMenu
LoadIconA
SetDlgItemTextW

gdi32

TranslateCharsetInfo
CreatePatternBrush
CreatePolyPolygonRgn
AddFontResourceA
SetWinMetaFileBits
RemoveFontResourceW
CreateDIBSection
SetMetaFileBitsEx
StretchDIBits

ntprint

PSetupInstallMonitor
PSetupInstallPrinterDriver
PSetupFreeMem
PSetupDestroyDriverInfo3
PSetupGetLocalDataField

Sections

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Bexd
Size: 112KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 299KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DPc
Size: 107KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28a4c6cd3e66616a4a923b8fd3ab7c6c

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:beCertificate

Extended Key Usages

Key Usages

5e:75:e9:97:f3:d7:0b:b8:c1:82:d5:6b:25:b7:d8:36Certificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

netapi32

rasman

user32

gdi32

ntprint

Sections

.edata Size: 2KB - Virtual size: 1KB

.edata Size: 12KB - Virtual size: 12KB

.rdata Size: 2KB - Virtual size: 46KB

.Bexd Size: 112KB - Virtual size: 122KB

.data Size: 7KB - Virtual size: 299KB

.DPc Size: 107KB - Virtual size: 148KB

.rsrc Size: 8KB - Virtual size: 7KB

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

5e:75:e9:97:f3:d7:0b:b8:c1:82:d5:6b:25:b7:d8:36
Certificate

.edata
Size: 2KB - Virtual size: 1KB

.edata
Size: 12KB - Virtual size: 12KB

.rdata
Size: 2KB - Virtual size: 46KB

.Bexd
Size: 112KB - Virtual size: 122KB

.data
Size: 7KB - Virtual size: 299KB

.DPc
Size: 107KB - Virtual size: 148KB

.rsrc
Size: 8KB - Virtual size: 7KB