ffdd80e38dd7b0d7fe48c3f49249c1d0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ffdd80e38dd7b0d7fe48c3f49249c1d0_JaffaCakes118
Size

21.2MB
MD5

ffdd80e38dd7b0d7fe48c3f49249c1d0
SHA1

1dbfd36af6304ac09efb036e84a9b27f8fa25766
SHA256

83ac5bbf4db0a44303bfd54b81b0fab0a1d8400c28ce929e9b893bc701099057
SHA512

ad5e1cfb894defa630e359231648c7ba30dc806b8116ff05a6894f11e93eff82feea950472341eae8f63fac13c0aac34230dc38553616b67774d7d677b994d0d
SSDEEP

6144:PMTVxKtM3ILVY76uJHxUAa8S8cfn4Op1y57:OKtMYZk6uZxgvNJ1y57

Score

1^/10

Malware Config

Signatures

Files

ffdd80e38dd7b0d7fe48c3f49249c1d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

34361b731a536538ad14d219fca7cd60

Code Sign

0f:05:05:ae:8b:e9:b8:bd:4e:fc:a0:60:c8:94:3d:2a
Certificate

Issuer

CN=1,1.2.840.113549.1.9.1=#130131,0.0=#130131

Not Before

31/12/2007, 16:00

Not After

31/12/2107, 16:00

Subject

CN=1,1.2.840.113549.1.9.1=#130131,0.0=#130131

f2:24:93:8e:8f:af:f6:e5:2c:93:27:5d:68:f8:95:d9:86:e2:6d:71
Signer

Actual PE Digest

f2:24:93:8e:8f:af:f6:e5:2c:93:27:5d:68:f8:95:d9:86:e2:6d:71

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
HeapFree
GetCurrentProcess
LCMapStringA
LoadLibraryA

user32

CreateWindowExA
wsprintfA
SetWindowLongA
CloseWindow

advapi32

RegEnumKeyA
RegEnumValueA
RegCloseKey
RegDeleteKeyA

ole32

CoMarshalInterface
OleRun
CoUninitialize
CoInitializeEx

Sections

CODE
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.!rc!
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jttk
Size: 21.0MB - Virtual size: 21.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

34361b731a536538ad14d219fca7cd60

Code Sign

0f:05:05:ae:8b:e9:b8:bd:4e:fc:a0:60:c8:94:3d:2aCertificate

f2:24:93:8e:8f:af:f6:e5:2c:93:27:5d:68:f8:95:d9:86:e2:6d:71Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

CODE Size: 10KB - Virtual size: 18KB

.data Size: 85KB - Virtual size: 166KB

.!rc! Size: 1024B - Virtual size: 1KB

.idata2 Size: 1024B - Virtual size: 4KB

.rsrc Size: 6KB - Virtual size: 8KB

.vmp0 Size: 12KB - Virtual size: 14KB

.adata Size: 68KB - Virtual size: 114KB

.jttk Size: 21.0MB - Virtual size: 21.0MB

0f:05:05:ae:8b:e9:b8:bd:4e:fc:a0:60:c8:94:3d:2a
Certificate

f2:24:93:8e:8f:af:f6:e5:2c:93:27:5d:68:f8:95:d9:86:e2:6d:71
Signer

CODE
Size: 10KB - Virtual size: 18KB

.data
Size: 85KB - Virtual size: 166KB

.!rc!
Size: 1024B - Virtual size: 1KB

.idata2
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 6KB - Virtual size: 8KB

.vmp0
Size: 12KB - Virtual size: 14KB

.adata
Size: 68KB - Virtual size: 114KB

.jttk
Size: 21.0MB - Virtual size: 21.0MB