186f8fd864bbba674ab0db0f6e354d93_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

186f8fd864bbba674ab0db0f6e354d93_JaffaCakes118
Size

361KB
MD5

186f8fd864bbba674ab0db0f6e354d93
SHA1

2bf6b420938a5b4c3d18ab9f4a5300dead9dabbd
SHA256

afdc02cb4036293eafd0dca00bc59c79211e3ccc8af3cb5983efd6ce1a665408
SHA512

ab17b8cb287637f1f64764ef6577a9d207e195a9dd86dfe491446556283c310395390aef7f73addd6906605c3a865a1bea22154acc091f4d01d5a5836fc737b9
SSDEEP

6144:IohUnromghWcIC/b76r+wMXv2GqGfU2qTCDF6oI2+EdEfVRPL9Pz:IinTu+kGs2qaNIEdORT9Pz

Score

1^/10

Malware Config

Signatures

Files

186f8fd864bbba674ab0db0f6e354d93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5343039bb297b649d3d7398fbb715b2

Code Sign

28:d3:eb:57:67:3a:c1:9b:4a:8e:19:84:35:aa:02:25
Certificate

Issuer

CN=5JCU

Not Before

08-06-2012 08:28

Not After

31-12-2039 23:59

Subject

CN=5JCU

Extended Key Usages

ExtKeyUsageCodeSigning

eb:bb:ff:e4:4c:5c:bf:c5:ee:9e:ff:5a:d2:8e:59:63:e7:5c:ad:6b
Signer

Actual PE Digest

eb:bb:ff:e4:4c:5c:bf:c5:ee:9e:ff:5a:d2:8e:59:63:e7:5c:ad:6b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
LoadLibraryA
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW
CloseHandle
VirtualAllocEx

gdi32

GetStockObject

advapi32

RegCloseKey

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data6
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5343039bb297b649d3d7398fbb715b2

Code Sign

28:d3:eb:57:67:3a:c1:9b:4a:8e:19:84:35:aa:02:25Certificate

Extended Key Usages

eb:bb:ff:e4:4c:5c:bf:c5:ee:9e:ff:5a:d2:8e:59:63:e7:5c:ad:6bSigner

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

Sections

.text Size: 41KB - Virtual size: 41KB

.data Size: 315KB - Virtual size: 315KB

.data6 Size: 512B - Virtual size: 100B

.data5 Size: 512B - Virtual size: 100B

.data4 Size: 512B - Virtual size: 100B

.data3 Size: 512B - Virtual size: 100B

.data2 Size: 512B - Virtual size: 100B

.reloc Size: 512B - Virtual size: 192B

28:d3:eb:57:67:3a:c1:9b:4a:8e:19:84:35:aa:02:25
Certificate

eb:bb:ff:e4:4c:5c:bf:c5:ee:9e:ff:5a:d2:8e:59:63:e7:5c:ad:6b
Signer

.text
Size: 41KB - Virtual size: 41KB

.data
Size: 315KB - Virtual size: 315KB

.data6
Size: 512B - Virtual size: 100B

.data5
Size: 512B - Virtual size: 100B

.data4
Size: 512B - Virtual size: 100B

.data3
Size: 512B - Virtual size: 100B

.data2
Size: 512B - Virtual size: 100B

.reloc
Size: 512B - Virtual size: 192B