General

Malware Config

Signatures

Files

• 127e83d247833f4adadbdf96bbca75d1_JaffaCakes118

  .exe windows:4 windows x86 arch:x86

  49d9ed0ba18dccd510c9a9d09ce5b85f

  
  

  Code Sign

  35:de:33:b3:53:d4:00:49:b4:3c:6b:26:c0:3d:1d:81

  Certificate

  Issuer

  CN=XFAJAAJUQJATWBWBZP

  Not Before

  24-05-2019 15:01

  Not After

  31-12-2039 23:59

  Subject

  CN=XFAJAAJUQJATWBWBZP

  Extended Key Usages

  ExtKeyUsageCodeSigning

  42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b

  Certificate

  Issuer

  CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

  Not Before

  07-06-2005 08:09

  Not After

  30-05-2020 10:48

  Subject

  CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19

  Certificate

  Issuer

  CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

  Not Before

  27-04-2011 00:00

  Not After

  30-05-2020 10:48

  Subject

  CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49

  Certificate

  Issuer

  CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  02-05-2019 00:00

  Not After

  30-05-2020 10:48

  Subject

  CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  5c:d7:8e:c3:cb:bc:49:6d:98:87:68:61:68:f6:e1:31:e9:7f:5b:c6

  Signer

  Actual PE Digest

  5c:d7:8e:c3:cb:bc:49:6d:98:87:68:61:68:f6:e1:31:e9:7f:5b:c6

  Digest Algorithm

  sha1

  PE Digest Matches

  false

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetModuleHandleW

  VirtualAllocEx

  GetUserDefaultUILanguage

  DuplicateHandle

  WaitForSingleObject

  Sleep

  GetCurrentProcess

  CreateThread

  SetThreadPriority

  TerminateThread

  ResumeThread

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetSystemInfo

  WaitForMultipleObjects

  CreateFileW

  FlushFileBuffers

  GetFileType

  GetLogicalDrives

  ReadFile

  SetEndOfFile

  SetFilePointerEx

  WriteFile

  SetErrorMode

  CreateFileMappingW

  MapViewOfFile

  UnmapViewOfFile

  MoveFileExW

  GetCurrentDirectoryW

  CreateDirectoryW

  FindClose

  FindFirstFileW

  GetFileAttributesExW

  GetFileInformationByHandle

  GetFullPathNameW

  GetLongPathNameW

  RemoveDirectoryW

  GetTempPathW

  DeviceIoControl

  MoveFileW

  SystemTimeToTzSpecificLocalTime

  FileTimeToSystemTime

  QueryPerformanceCounter

  GetCurrencyFormatW

  GetTickCount

  FindFirstFileExW

  GetTimeFormatW

  GetStartupInfoW

  GetModuleFileNameW

  MultiByteToWideChar

  WideCharToMultiByte

  FreeLibrary

  GetTimeZoneInformation

  GetGeoInfoW

  GetUserGeoID

  GetModuleHandleExW

  ExitProcess

  GetVolumeInformationW

  lstrcmpW

  ReleaseMutex

  CreateMutexW

  VirtualAlloc

  VirtualFree

  InitializeCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  TerminateProcess

  IsProcessorFeaturePresent

  IsDebuggerPresent

  GetSystemTimeAsFileTime

  InitializeSListHead

  RtlUnwind

  EncodePointer

  RaiseException

  InitializeCriticalSectionAndSpinCount

  LoadLibraryExW

  SetLastError

  GetCommandLineA

  ExitThread

  FreeLibraryAndExitThread

  SetStdHandle

  GetConsoleMode

  ReadConsoleW

  GetConsoleCP

  GetStdHandle

  GetModuleFileNameA

  GetACP

  HeapFree

  HeapAlloc

  LCMapStringW

  EnumSystemLocalesW

  DecodePointer

  HeapReAlloc

  GetCPInfo

  SetEnvironmentVariableA

  WriteConsoleW

  GetStringTypeW

  IsValidCodePage

  GetOEMCP

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetProcessHeap

  FindFirstFileExA

  FindNextFileA

  HeapSize

  GetDateFormatW

  GetThreadPriority

  GetCurrentThread

  ResetEvent

  LoadLibraryW

  GetSystemDirectoryW

  CreateEventW

  WaitForSingleObjectEx

  SetEvent

  GetConsoleWindow

  OutputDebugStringW

  FindNextChangeNotification

  GetLocalTime

  GetSystemTime

  GetUserDefaultLCID

  CompareStringW

  GetCurrentProcessId

  GlobalSize

  LoadLibraryA

  GetLocaleInfoW

  GlobalUnlock

  GlobalLock

  GlobalAlloc

  OpenProcess

  CheckRemoteDebuggerPresent

  GetUserDefaultLangID

  CreateProcessW

  CloseHandle

  ExpandEnvironmentStringsW

  IsValidLocale

  IsValidLanguageGroup

  FormatMessageW

  GetProcAddress

  GetCurrentThreadId

  GetLastError

  FindNextFileW

  FindCloseChangeNotification

  FindFirstChangeNotificationW

  LocalFree

  GetCommandLineW

  GetVersionExW

  CopyFileW

  SetFileAttributesW

  GetFileAttributesW

  GetDriveTypeW

  QueryPerformanceFrequency

  DeleteFileW

  GetStartupInfoA

  GetModuleHandleA

  user32

  GetDesktopWindow

  GetClipboardOwner

  GetThreadDesktop

  GetCaretBlinkTime

  DestroyWindow

  GetKeyState

  IsIconic

  GetTopWindow

  GetSysColor

  GetListBoxInfo

  IsWindowVisible

  gdi32

  GetTextAlign

  GetDCPenColor

  CloseMetaFile

  CreateMetaFileA

  FillPath

  GetFontLanguageInfo

  GetSystemPaletteUse

  GetLayout

  advapi32

  RegOpenKeyA

  RegQueryValueExA

  RegCloseKey

  RegQueryValueExW

  OpenProcessToken

  CopySid

  FreeSid

  GetLengthSid

  GetTokenInformation

  RegCreateKeyExW

  RegDeleteKeyW

  RegDeleteValueW

  RegEnumKeyExW

  RegEnumValueW

  RegFlushKey

  RegQueryInfoKeyW

  RegSetValueExW

  SystemFunction036

  RegOpenKeyExW

  ole32

  StringFromGUID2

  CoTaskMemAlloc

  CoGetMalloc

  CoUninitialize

  CoTaskMemFree

  DoDragDrop

  OleIsCurrentClipboard

  OleFlushClipboard

  OleGetClipboard

  OleSetClipboard

  CoCreateGuid

  OleUninitialize

  OleInitialize

  RevokeDragDrop

  CoCreateInstance

  ReleaseStgMedium

  RegisterDragDrop

  CoLockObjectExternal

  CoInitialize

  msvcrt

  _except_handler3

  __set_app_type

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _initterm

  __getmainargs

  _acmdln

  exit

  _XcptFilter

  _exit

  _onexit

  __dllonexit

  _controlfp

  imm32

  ImmSetCompositionWindow

  ImmSetCandidateWindow

  ImmGetVirtualKey

  ImmGetDefaultIMEWnd

  ImmGetContext

  ImmReleaseContext

  ImmAssociateContext

  ImmNotifyIME

  ImmGetCompositionStringW

  Sections

  .text

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 20KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 74KB - Virtual size: 74KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ