1ae02c21886e25f51a43bffa7587fa6c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1ae02c21886e25f51a43bffa7587fa6c_JaffaCakes118
Size

268KB
MD5

1ae02c21886e25f51a43bffa7587fa6c
SHA1

3b8fd0b80faf6f26bc3d0163360557cedfb94291
SHA256

717b42dc6717ad3dc8c58b82eece0422b12673e75ade90c11c91d5ba823b6d02
SHA512

7314d83214df9bd4514dc232cc4e4609bc8c248e8b16fc86b0b856c52bab93092ca8c438cb432f1dd371768dfe761ed6ed7912cba30fc62654bddeb991f2018a
SSDEEP

6144:3KDLxqyd3oxcdzKZjcufgM7e3lSQtt0PoOKEtq70uHRinFBqLTabu0K:aDtu+sjcufWlvwoOKEtY/xUBqLSxK

Score

1^/10

Malware Config

Signatures

Files

1ae02c21886e25f51a43bffa7587fa6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5707ad6a92febb872fdc169934a2d29b

Code Sign

26:f7:53:e5:9e:63:45:bf:43:4a:26:b1:54:15:64:bd
Certificate

Issuer

CN=GggvpYSuFAF7Uqd

Not Before

04/04/2012, 06:53

Not After

31/12/2039, 23:59

Subject

CN=GggvpYSuFAF7Uqd

Extended Key Usages

ExtKeyUsageCodeSigning

cf:97:9f:19:07:21:6e:34:ad:8d:81:ab:06:0e:25:f0:22:b8:90:61
Signer

Actual PE Digest

cf:97:9f:19:07:21:6e:34:ad:8d:81:ab:06:0e:25:f0:22:b8:90:61

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
LoadLibraryA
GetProcAddress
GetWindowsDirectoryA
lstrcatA
GetModuleHandleA

gdi32

GetStockObject

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 259KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g7
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g6
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5707ad6a92febb872fdc169934a2d29b

Code Sign

26:f7:53:e5:9e:63:45:bf:43:4a:26:b1:54:15:64:bdCertificate

Extended Key Usages

cf:97:9f:19:07:21:6e:34:ad:8d:81:ab:06:0e:25:f0:22:b8:90:61Signer

Headers

File Characteristics

Imports

kernel32

gdi32

msvcrt

advapi32

Sections

.text Size: 259KB - Virtual size: 258KB

.data Size: 1024B - Virtual size: 1KB

.g7 Size: 1024B - Virtual size: 1000B

.g6 Size: 1024B - Virtual size: 1000B

.g5 Size: 1024B - Virtual size: 1000B

.g4 Size: 1024B - Virtual size: 1000B

.g3 Size: 1024B - Virtual size: 1000B

.g2 Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 136B

26:f7:53:e5:9e:63:45:bf:43:4a:26:b1:54:15:64:bd
Certificate

cf:97:9f:19:07:21:6e:34:ad:8d:81:ab:06:0e:25:f0:22:b8:90:61
Signer

.text
Size: 259KB - Virtual size: 258KB

.data
Size: 1024B - Virtual size: 1KB

.g7
Size: 1024B - Virtual size: 1000B

.g6
Size: 1024B - Virtual size: 1000B

.g5
Size: 1024B - Virtual size: 1000B

.g4
Size: 1024B - Virtual size: 1000B

.g3
Size: 1024B - Virtual size: 1000B

.g2
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 136B