02f2a9e79fcf70a0ed339686dd1f6307_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

02f2a9e79fcf70a0ed339686dd1f6307_JaffaCakes118
Size

5KB
MD5

02f2a9e79fcf70a0ed339686dd1f6307
SHA1

ece4435030dc43a364ac419b9bb7b69265b611a4
SHA256

8f7b55d434de3ce140cc2ff521cd1d25cba8e03b3013085950d4e47ef2f3dd47
SHA512

37cdcbb898c43781df88a084d0cb23c861ff8b863452d08190f752d997e1b789ad6894d9463002d39350610a9e57eab907465d4f5029ec0711565b7e561e1e76
SSDEEP

96:LTM4UnqAh/Df72EU7G7e7VMnannXcStSw7FC2:LTMuG7/dQmnansStN82

Score

1^/10

Malware Config

Signatures

Files

02f2a9e79fcf70a0ed339686dd1f6307_JaffaCakes118
.dll windows:4 windows x86 arch:x86

58cb3dbfe4f9c58ebf682e6abdcd413f

Code Sign

1a:30:48:db:f4:ac:03:47:82:21:55:7a:db:3a:68:01
Certificate

Issuer

CN=Adobe Systems\, Incorporated,OU=Adobe Systems,O=Adobe Systems,L=Saarland,ST=Saarland,C=DE,1.2.840.113549.1.9.1=#0c12737570706f72744073616d73756e672e6465

Not Before

22/03/2012, 00:00

Not After

21/03/2013, 23:59

Subject

CN=Adobe Systems\, Incorporated,OU=Adobe Systems,O=Adobe Systems,L=Saarland,ST=Saarland,C=DE,1.2.840.113549.1.9.1=#0c12737570706f72744073616d73756e672e6465

Extended Key Usages

ExtKeyUsageCodeSigning

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey

kernel32

GetModuleFileNameA
GetModuleHandleA
lstrcmpiA
lstrlenA

shlwapi

SHCopyKeyW

user32

SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx

Exports

Exports

CloseGuard
DirectGuard
SetGuard

Sections

.text
Size: 1024B - Virtual size: 862B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 527B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58cb3dbfe4f9c58ebf682e6abdcd413f

Code Sign

1a:30:48:db:f4:ac:03:47:82:21:55:7a:db:3a:68:01Certificate

Extended Key Usages

Signer

Headers

File Characteristics

Imports

advapi32

kernel32

shlwapi

user32

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 862B

.rdata Size: 1024B - Virtual size: 527B

.data Size: 512B - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 120B

1a:30:48:db:f4:ac:03:47:82:21:55:7a:db:3a:68:01
Certificate

.text
Size: 1024B - Virtual size: 862B

.rdata
Size: 1024B - Virtual size: 527B

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 120B