058e6f903592c7fcad82d8fe7c89a965_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

058e6f903592c7fcad82d8fe7c89a965_JaffaCakes118
Size

314KB
MD5

058e6f903592c7fcad82d8fe7c89a965
SHA1

37703bc95f87052f5b1fe932ce59a4701091fd10
SHA256

200e4c4775be3e06e4001414be6c53ee1e498336f6162f4de27f43f054eb4cdd
SHA512

5cc7704456c1749c7df85b2b4d84d8ab55b440a6fade96c502ac02756a0f71df83707682e7c46756e42b5b7eace3608cb7f25358c78aedeb7e9333a9decaa283
SSDEEP

6144:Jnt1i+igy0YFanNOpqh9ugkVwpQVdPjwZqNPmYuJ6:JntAmujpqHcwkjPCJ6

Score

1^/10

Malware Config

Signatures

Files

058e6f903592c7fcad82d8fe7c89a965_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19774d047486e55aedac4f38141e1ace

Code Sign

0a:0d:2d:fc:3d:7e:57:c8:be:2c:d7:91:bd:63:df:c8
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

17-09-2014 00:00

Not After

25-11-2015 12:00

Subject

CN=Consortium ltd.,O=Consortium ltd.,L=Roseau,ST=Commonwealth of Dominica,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

b8:3c:aa:71:09:b5:a3:fc:ba:a0:57:73:74:82:de:a5:5a:c1:d5:fb
Signer

Actual PE Digest

b8:3c:aa:71:09:b5:a3:fc:ba:a0:57:73:74:82:de:a5:5a:c1:d5:fb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

kernel32

GetTickCount
GetCommandLineW
WriteFile
VirtualAlloc
CreateFileA
LockResource
ReadFile
TlsSetValue
GetLastError
CloseHandle
GetCurrentProcess
GetUserDefaultLangID
CreateThread
QueryPerformanceCounter
DeleteFileW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapAlloc
RtlUnwind
VirtualFree
GetStringTypeW
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetVersionExA
GetVersion
TlsGetValue
ExitProcess
GetStartupInfoA
GetModuleHandleA
GetProcAddress
GetCommandLineA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
HeapFree
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings

user32

RegisterClassExA
GetSystemMetrics
CreateWindowExA
ShowWindow
RegisterClipboardFormatA
RemoveMenu
GetClientRect
EndDialog
MessageBoxA

gdi32

SetBkColor
SetBkMode
Rectangle

advapi32

GetUserNameA
AllocateAndInitializeSid
RegCloseKey
RegSetValueExW

ole32

CoInitialize
CoTaskMemAlloc
CoUninitialize

Sections

.text
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.qdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19774d047486e55aedac4f38141e1ace

Code Sign

0a:0d:2d:fc:3d:7e:57:c8:be:2c:d7:91:bd:63:df:c8Certificate

Extended Key Usages

Key Usages

b8:3c:aa:71:09:b5:a3:fc:ba:a0:57:73:74:82:de:a5:5a:c1:d5:fbSigner

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

ole32

Sections

.text Size: 264KB - Virtual size: 263KB

.qdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 28KB - Virtual size: 26KB

0a:0d:2d:fc:3d:7e:57:c8:be:2c:d7:91:bd:63:df:c8
Certificate

b8:3c:aa:71:09:b5:a3:fc:ba:a0:57:73:74:82:de:a5:5a:c1:d5:fb
Signer

.text
Size: 264KB - Virtual size: 263KB

.qdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 28KB - Virtual size: 26KB