04ef46bf51dda6b11ed73d642c930287_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

04ef46bf51dda6b11ed73d642c930287_JaffaCakes118
Size

262KB
MD5

04ef46bf51dda6b11ed73d642c930287
SHA1

b2432212729abb949609b2a9dc91be97d45168fa
SHA256

bfc024bc0e81f81374a59bb2a32af54efc06b6556c0b46ba934cfb5bcc2086b5
SHA512

1013deded4a83b0e3c1d1a0147427f1b5ff80c5da303933849839ea06035583dc19818ed1a47cb72dd3aaa8ba097d5c6a22414fc967a1ab366e3f3f963737e6e
SSDEEP

6144:gW8Gp+df0afmVTRMdtdpn94sLrNXel9/b98+MANX:X8YkfXf4TRM/94svNuz/b9Zr

Score

1^/10

Malware Config

Signatures

Files

04ef46bf51dda6b11ed73d642c930287_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51faaa25dc23f004def8c4c23e21714d

Code Sign

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77
Certificate

Issuer

CN=ggggggggg

Not Before

17/01/2012, 12:30

Not After

31/12/2039, 23:59

Subject

CN=ggggggggg

Extended Key Usages

ExtKeyUsageCodeSigning

0d:44:00:52:97:30:fc:14:2a:65:6e:1c:b3:ed:fa:a8:94:21:16:50
Signer

Actual PE Digest

0d:44:00:52:97:30:fc:14:2a:65:6e:1c:b3:ed:fa:a8:94:21:16:50

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
GetModuleHandleA
GetProcAddress
lstrcmpi
FlushConsoleInputBuffer
lstrcpynW
WritePrivateProfileSectionW
GlobalSize
GetProcessTimes
GetCPInfoExW
GetConsoleDisplayMode
SetConsoleCursorInfo
GetNumberFormatA
ReadFileEx

user32

LoadIconA

advapi32

RegOpenKeyExW

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51faaa25dc23f004def8c4c23e21714d

Code Sign

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77Certificate

Extended Key Usages

0d:44:00:52:97:30:fc:14:2a:65:6e:1c:b3:ed:fa:a8:94:21:16:50Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 256KB - Virtual size: 255KB

.text3 Size: 512B - Virtual size: 512B

.data Size: 1024B - Virtual size: 828B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 308B

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77
Certificate

0d:44:00:52:97:30:fc:14:2a:65:6e:1c:b3:ed:fa:a8:94:21:16:50
Signer

.text
Size: 256KB - Virtual size: 255KB

.text3
Size: 512B - Virtual size: 512B

.data
Size: 1024B - Virtual size: 828B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 308B