0fff6bf344fa9812703c5938e3f4f9a8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0fff6bf344fa9812703c5938e3f4f9a8_JaffaCakes118
Size

272KB
MD5

0fff6bf344fa9812703c5938e3f4f9a8
SHA1

c2deac8e9c7c6626595afc6bf8eeb645e8dc6e20
SHA256

8a7888f4c5c99d457d4fbd35acf1305094400934be55e2693cc98e795da25190
SHA512

ee99a6205929d8a69bb9e21d5dbc0e04cbb5b918ed67f3d3045e704f94adbb3c22b260140c1556790501756517dc7abe68523e51487ac77a4d881c51ebd78c33
SSDEEP

6144:2enUwv/kkdT9k9V1Fm7AxQrOmXxSumZBF9md934mZqC7qqxKf9/0Jd3/9sJ:9Uwv/f9k9VSkxQVXxcvFsXIW7jKfKL3y

Score

1^/10

Malware Config

Signatures

Files

0fff6bf344fa9812703c5938e3f4f9a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b033a3aedebc6fb3ce97e0dc10fae54

Code Sign

5f:e1:1f:c5:d2:69:09:b3:4d:22:0f:e7:08:48:22:a2
Certificate

Issuer

CN=Ru3Ue4SyIDSA

Not Before

09/03/2012, 06:39

Not After

31/12/2039, 23:59

Subject

CN=Ru3Ue4SyIDSA

Extended Key Usages

ExtKeyUsageCodeSigning

06:ee:57:bd:b2:8c:6b:1e:c8:87:8d:82:eb:98:e4:98:7b:ee:7e:dd
Signer

Actual PE Digest

06:ee:57:bd:b2:8c:6b:1e:c8:87:8d:82:eb:98:e4:98:7b:ee:7e:dd

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateFileA
GetWindowsDirectoryA
lstrlenA
lstrcpyA

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textQ1
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textQ2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textQ3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textQ4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b033a3aedebc6fb3ce97e0dc10fae54

Code Sign

5f:e1:1f:c5:d2:69:09:b3:4d:22:0f:e7:08:48:22:a2Certificate

Extended Key Usages

06:ee:57:bd:b2:8c:6b:1e:c8:87:8d:82:eb:98:e4:98:7b:ee:7e:ddSigner

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 2KB - Virtual size: 1KB

.textQ1 Size: 256KB - Virtual size: 256KB

.textQ2 Size: 512B - Virtual size: 100B

.textQ3 Size: 512B - Virtual size: 100B

.textQ4 Size: 512B - Virtual size: 100B

.data Size: 512B - Virtual size: 444B

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 512B - Virtual size: 112B

5f:e1:1f:c5:d2:69:09:b3:4d:22:0f:e7:08:48:22:a2
Certificate

06:ee:57:bd:b2:8c:6b:1e:c8:87:8d:82:eb:98:e4:98:7b:ee:7e:dd
Signer

.text
Size: 2KB - Virtual size: 1KB

.textQ1
Size: 256KB - Virtual size: 256KB

.textQ2
Size: 512B - Virtual size: 100B

.textQ3
Size: 512B - Virtual size: 100B

.textQ4
Size: 512B - Virtual size: 100B

.data
Size: 512B - Virtual size: 444B

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 512B - Virtual size: 112B