General

Malware Config

Signatures

Files

• af285a3f91f3f9aac89875942c03771b_JaffaCakes118

  .exe windows:5 windows x86 arch:x86

  fa26c5b9a4bfd568e23d820734279e0c

  
  

  Code Sign

  fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70

  Certificate

  Issuer

  CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  08-03-2016 13:10

  Not After

  30-05-2027 13:10

  Subject

  CN=Certum EV TSA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  8b:4d:22:f2:7d:1e:51:f2:dd:84:7c:5e:bd:7e:41:3a

  Certificate

  Issuer

  CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  12-11-2018 00:00

  Not After

  12-11-2019 23:59

  Subject

  CN=GGMF Limited,O=GGMF Limited,POSTALCODE=SE16 2XJ,STREET=19 Hothfield Place,L=London,ST=London,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af

  Certificate

  Issuer

  CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  09-05-2013 00:00

  Not After

  08-05-2028 23:59

  Subject

  CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  34:de:fc:64:c7:b3:66:63:24:ed:a0:17:4f:42:0e:51:72:c3:12:9b

  Signer

  Actual PE Digest

  34:de:fc:64:c7:b3:66:63:24:ed:a0:17:4f:42:0e:51:72:c3:12:9b

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  user32

  ClientToScreen

  SetRectEmpty

  GetQueueStatus

  HideCaret

  ShowScrollBar

  GetLastInputInfo

  GetThreadDesktop

  GetMenuStringA

  EnumWindows

  LoadAcceleratorsA

  LoadCursorA

  gdi32

  FloodFill

  GetTextMetricsW

  GetTextExtentPointI

  GdiGetBatchLimit

  kernel32

  VirtualQuery

  FlushFileBuffers

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  VirtualProtect

  GetSystemInfo

  CreateFileA

  SetStdHandle

  CloseHandle

  Module32FirstW

  GetPrivateProfileStructW

  GetEnvironmentVariableW

  GetSystemDefaultLangID

  GetFileSizeEx

  ExitThread

  FindVolumeMountPointClose

  GetLogicalDriveStringsA

  GetProfileStringA

  GetConsoleWindow

  GlobalSize

  GetNumaProcessorNode

  GetConsoleMode

  GetConsoleCP

  CompareStringA

  CompareStringW

  GetProcessId

  GetCurrentThreadId

  InterlockedIncrement

  InterlockedDecrement

  GetCommandLineA

  GetVersionExA

  GetStartupInfoA

  GetCPInfo

  OutputDebugStringA

  GetTimeFormatA

  GetDateFormatA

  GetLastError

  HeapFree

  GetProcAddress

  GetModuleHandleA

  ExitProcess

  DeleteCriticalSection

  LeaveCriticalSection

  FatalAppExitA

  EnterCriticalSection

  GetModuleHandleW

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  SetLastError

  SetEnvironmentVariableA

  GetCurrentThread

  GetACP

  GetOEMCP

  HeapAlloc

  GetUserDefaultLCID

  GetLocaleInfoA

  EnumSystemLocalesA

  IsValidLocale

  IsValidCodePage

  GetStringTypeA

  MultiByteToWideChar

  GetStringTypeW

  SetFilePointer

  SetUnhandledExceptionFilter

  WriteFile

  GetStdHandle

  GetModuleFileNameA

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  SetHandleCount

  GetFileType

  HeapDestroy

  HeapCreate

  VirtualFree

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  GetLocaleInfoW

  LCMapStringA

  LCMapStringW

  GetTimeZoneInformation

  VirtualAlloc

  HeapReAlloc

  SetConsoleCtrlHandler

  FreeLibrary

  InterlockedExchange

  LoadLibraryExA

  InitializeCriticalSection

  Sleep

  RtlUnwind

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  oleaut32

  SafeArrayAllocDescriptorEx

  advapi32

  LookupAccountNameW

  EnumServicesStatusW

  LockServiceDatabase

  Sections

  .text

  Size: 644KB - Virtual size: 643KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 308KB - Virtual size: 304KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 84KB - Virtual size: 102KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 8KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 8KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 12KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ