f716a85c7f767d9c1fca87e9f5a0fbf0_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f716a85c7f767d9c1fca87e9f5a0fbf0_JaffaCakes118
Size

365KB
MD5

f716a85c7f767d9c1fca87e9f5a0fbf0
SHA1

b85a2abdde99b829af17daca5efe4e55e6a7547d
SHA256

b6b605c12fb56590c4a822f2058660b777e36696e07642f6c45a5af6f35b5d71
SHA512

51543a5744dbb2096aa34a5d9ee1c29e7e034164a05de40058edb3b0eb9a96ed59f54eb48a912196727d7288da3457152df1fb508d9106e62805c96f4513b150
SSDEEP

6144:fQkKUrQ+X+BMEiccH+wyKUHk7pDJTubDc/uPzFseY1:tXrEicwjff1D5ufcG4

Score

1^/10

Malware Config

Signatures

Files

f716a85c7f767d9c1fca87e9f5a0fbf0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d7fb7aecd13a520997549acfa990a3f

Code Sign

45:a1:c8:d0:18:ac:64:4c:bb:58:9b:8d:4b:dc:f9:3c
Certificate

Issuer

CN=ruUB

Not Before

26-06-2012 05:00

Not After

31-12-2039 23:59

Subject

CN=ruUB

Extended Key Usages

ExtKeyUsageCodeSigning

69:64:e3:82:11:7c:79:80:79:06:0d:a8:21:05:d5:60:a8:bf:0d:b5
Signer

Actual PE Digest

69:64:e3:82:11:7c:79:80:79:06:0d:a8:21:05:d5:60:a8:bf:0d:b5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
GetModuleHandleA
GetProcAddress
CloseHandle
GetCommandLineA
lstrcatW
CreateFileW
VirtualAllocEx

user32

RegisterClassExA
CreateWindowExA

advapi32

RegCloseKey
RegOpenKeyW

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9d7fb7aecd13a520997549acfa990a3f

Code Sign

45:a1:c8:d0:18:ac:64:4c:bb:58:9b:8d:4b:dc:f9:3cCertificate

Extended Key Usages

69:64:e3:82:11:7c:79:80:79:06:0d:a8:21:05:d5:60:a8:bf:0d:b5Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 52KB - Virtual size: 51KB

.data Size: 1024B - Virtual size: 1KB

.data4 Size: 1024B - Virtual size: 1000B

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 308KB - Virtual size: 308KB

.reloc Size: 512B - Virtual size: 252B

45:a1:c8:d0:18:ac:64:4c:bb:58:9b:8d:4b:dc:f9:3c
Certificate

69:64:e3:82:11:7c:79:80:79:06:0d:a8:21:05:d5:60:a8:bf:0d:b5
Signer

.text
Size: 52KB - Virtual size: 51KB

.data
Size: 1024B - Virtual size: 1KB

.data4
Size: 1024B - Virtual size: 1000B

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 308KB - Virtual size: 308KB

.reloc
Size: 512B - Virtual size: 252B