21830774956d257f511012568af993e5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

21830774956d257f511012568af993e5_JaffaCakes118
Size

414KB
MD5

21830774956d257f511012568af993e5
SHA1

414fe243204264af537ed1415fc41cdb285ce9e9
SHA256

8761648492e17bb6c24c1849af6ac1fc51cd0ae7d9379a3ad411cd218723d4fc
SHA512

2d6d33e826f2ab230d261029b54e8f0ce8099ba80a6ebe42f4c3e26e9c4c816c7dde8f2f403352d4b849f4a67a48087de6cccdf5660f2228c425fdee7c675bda
SSDEEP

12288:5IDPFHuVcbqlopurcvK29P3/GxzDQk+ffqWO:GbFHo3oYrcpv8DQ1qWO

Score

1^/10

Malware Config

Signatures

Files

21830774956d257f511012568af993e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6cd223bb0cdab833f0e54dfd832314ec

Code Sign

5e:da:d3:df:8f:e1:69:b0:49:76:4f:52:c8:f2:32:94
Certificate

Issuer

CN=Root Agency

Not Before

09/11/2011, 21:01

Not After

16/12/2014, 22:00

Subject

CN=OKN

Extended Key Usages

ExtKeyUsageCodeSigning

b3:a9:1e:1b:12:15:dc:4c:28:8e:09:e2:56:c4:2e:81:87:bd:fa:41
Signer

Actual PE Digest

b3:a9:1e:1b:12:15:dc:4c:28:8e:09:e2:56:c4:2e:81:87:bd:fa:41

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glDeleteTextures
glDrawArrays
glRects
glFrontFace
glRasterPos3d
glDrawElements
glColor4bv
glCallList
glClearAccum
glGetPixelMapfv

glu32

gluBuild1DMipmaps
gluErrorString

user32

ShowWindowAsync
CascadeWindows
SetDlgItemInt
IsWindowUnicode
GetLastActivePopup
DefDlgProcA
GetWindowTextLengthA
AdjustWindowRectEx

oledlg

ord12

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

kernel32

GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
HeapAlloc
HeapUnlock
CreateSemaphoreA
ReleaseSemaphore
GetStartupInfoA
IsBadWritePtr
GetStringTypeW
VirtualProtectEx
WaitForMultipleObjects
LeaveCriticalSection

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 286KB - Virtual size: 369KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6cd223bb0cdab833f0e54dfd832314ec

Code Sign

5e:da:d3:df:8f:e1:69:b0:49:76:4f:52:c8:f2:32:94Certificate

Extended Key Usages

b3:a9:1e:1b:12:15:dc:4c:28:8e:09:e2:56:c4:2e:81:87:bd:fa:41Signer

Headers

File Characteristics

Imports

opengl32

glu32

user32

oledlg

msvcrt

kernel32

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 110KB - Virtual size: 110KB

.data Size: 286KB - Virtual size: 369KB

.tls Size: 512B - Virtual size: 4B

.rsrc Size: 5KB - Virtual size: 5KB

5e:da:d3:df:8f:e1:69:b0:49:76:4f:52:c8:f2:32:94
Certificate

b3:a9:1e:1b:12:15:dc:4c:28:8e:09:e2:56:c4:2e:81:87:bd:fa:41
Signer

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 110KB - Virtual size: 110KB

.data
Size: 286KB - Virtual size: 369KB

.tls
Size: 512B - Virtual size: 4B

.rsrc
Size: 5KB - Virtual size: 5KB