General

Malware Config

Signatures

Files

• 42f863b666068491f41cfcacc57eb711_JaffaCakes118

  .exe windows:5 windows x86 arch:x86

  c8a8da18e812703043258f097920f750

  
  

  Code Sign

  3b:4f:2a:cd:4c:30:d5:78:bf:aa:b7:7f:b0:67:2f:79

  Certificate

  Issuer

  CN=DHKDQXBP

  Not Before

  14-11-2018 11:53

  Not After

  31-12-2039 23:59

  Subject

  CN=DHKDQXBP

  Extended Key Usages

  ExtKeyUsageCodeSigning

  4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77

  Certificate

  Issuer

  CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

  Not Before

  31-12-2015 00:00

  Not After

  09-07-2019 18:40

  Subject

  CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  f7:9e:3a:9f:b0:82:99:25:f6:00:6f:01:70:92:2a:8f:02:37:55:2e:dd:c2:49:c5:52:b2:c9:5d:ed:f7:ed:8f

  Signer

  Actual PE Digest

  f7:9e:3a:9f:b0:82:99:25:f6:00:6f:01:70:92:2a:8f:02:37:55:2e:dd:c2:49:c5:52:b2:c9:5d:ed:f7:ed:8f

  Digest Algorithm

  sha256

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  LeaveCriticalSection

  InterlockedIncrement

  Sleep

  InterlockedExchangeAdd

  InterlockedExchange

  InterlockedDecrement

  InterlockedCompareExchange

  InitializeCriticalSection

  GetModuleHandleW

  GetCurrentThreadId

  FreeLibrary

  EnterCriticalSection

  DeleteCriticalSection

  LoadLibraryA

  GetProcAddress

  GetModuleHandleA

  MulDiv

  VirtualAllocEx

  user32

  BeginPaint

  CallNextHookEx

  CallWindowProcW

  CharNextW

  CharPrevW

  ClientToScreen

  CloseClipboard

  CopyRect

  CreateDialogParamW

  CreateMenu

  CreateWindowExW

  DefDlgProcW

  DefWindowProcW

  DeleteMenu

  DialogBoxParamW

  DispatchMessageW

  DrawEdge

  DrawFocusRect

  DrawIcon

  DrawMenuBar

  EnableMenuItem

  EnableWindow

  EndDialog

  EndPaint

  FillRect

  GetActiveWindow

  GetAsyncKeyState

  GetClientRect

  GetClipboardData

  GetDC

  GetDesktopWindow

  GetDlgCtrlID

  GetDlgItem

  GetFocus

  GetKeyState

  GetMenu

  GetMenuStringW

  GetMessageW

  GetParent

  GetPropW

  CharLowerA

  GetSysColor

  GetSystemMetrics

  GetWindow

  GetWindowLongW

  GetWindowRect

  GetWindowTextW

  InflateRect

  InsertMenuW

  InvalidateRect

  IsClipboardFormatAvailable

  IsDialogMessageW

  IsWindow

  IsWindowEnabled

  KillTimer

  LoadAcceleratorsW

  LoadCursorW

  LoadIconW

  LoadStringW

  MapWindowPoints

  MessageBeep

  MessageBoxW

  ModifyMenuW

  MoveWindow

  OpenClipboard

  PeekMessageW

  PostMessageW

  PostQuitMessage

  RedrawWindow

  RegisterClassW

  RegisterClipboardFormatW

  RegisterWindowMessageW

  ReleaseDC

  RemoveMenu

  RemovePropW

  ScreenToClient

  SendMessageW

  SetActiveWindow

  SetClassLongW

  SetCursor

  SetDlgItemTextW

  SetFocus

  SetForegroundWindow

  SetPropW

  SetRect

  SetTimer

  SetWindowLongW

  SetWindowPos

  SetWindowTextW

  SetWindowsHookExW

  ShowWindow

  TranslateAcceleratorW

  TranslateMessage

  UnhookWindowsHookEx

  UpdateWindow

  WinHelpW

  wsprintfW

  wvsprintfW

  IsIconic

  DestroyCursor

  IsWindowVisible

  WindowFromDC

  ReleaseCapture

  GetWindowContextHelpId

  GetClipboardOwner

  CloseDesktop

  GetSysColorBrush

  GetWindowTextLengthA

  DestroyMenu

  CopyIcon

  IsCharAlphaA

  DestroyWindow

  GetSubMenu

  gdi32

  GdiGetBatchLimit

  SetMetaRgn

  GetEnhMetaFileA

  GetDCPenColor

  DeleteEnhMetaFile

  CreateSolidBrush

  GetEnhMetaFileW

  AddFontResourceA

  SwapBuffers

  GetStockObject

  CreateCompatibleDC

  GetDCBrushColor

  advapi32

  RegOpenKeyExW

  Sections

  .text

  Size: 6KB - Virtual size: 5KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1.3MB - Virtual size: 1.3MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 744KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ