26f6b03800d34ceaf4b93a78c41f778d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

26f6b03800d34ceaf4b93a78c41f778d_JaffaCakes118
Size

375KB
MD5

26f6b03800d34ceaf4b93a78c41f778d
SHA1

f12d68c2b3652a84f79664b926007245247b7d47
SHA256

1bc0a058defd98274888b945a8632674fa09d9ab9e10a5c8527dcc81f68f0aed
SHA512

1cddf050436174e23911c568ded1d81fddd8de8ae74f900ae61abeff682da1a80f242c61e5f6317c86ac7141d383fd2fb0bc2bd8b159608173b3d1cb746727d0
SSDEEP

6144:1n0/zi/13lW90LFDNrfXLXNjYR8cy+XR2f9y2zT4gJaLwiTmB:N0LiFEUrj9j4xGFj/

Score

1^/10

Malware Config

Signatures

Files

26f6b03800d34ceaf4b93a78c41f778d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a31cb9d3e3368f925ea79e5d448cdba5

Code Sign

6b:41:0a:ca:01:c1:0d:a0:44:fa:77:3c:ef:c7:6a:0a
Certificate

Issuer

CN=fGEE

Not Before

15/06/2012, 06:22

Not After

31/12/2039, 23:59

Subject

CN=fGEE

Extended Key Usages

ExtKeyUsageCodeSigning

8d:6c:bd:0d:28:94:1f:1e:b6:0b:5b:0c:de:61:90:71:b2:13:e7:bf
Signer

Actual PE Digest

8d:6c:bd:0d:28:94:1f:1e:b6:0b:5b:0c:de:61:90:71:b2:13:e7:bf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
LoadLibraryA
GetProcAddress
CloseHandle
GetWindowsDirectoryW
lstrcatW
CreateFileW
VirtualAllocEx

user32

LoadIconA
LoadCursorA

advapi32

RegCloseKey

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 326KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data10
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data9
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data8
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data7
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data6
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a31cb9d3e3368f925ea79e5d448cdba5

Code Sign

6b:41:0a:ca:01:c1:0d:a0:44:fa:77:3c:ef:c7:6a:0aCertificate

Extended Key Usages

8d:6c:bd:0d:28:94:1f:1e:b6:0b:5b:0c:de:61:90:71:b2:13:e7:bfSigner

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 42KB - Virtual size: 41KB

.data Size: 326KB - Virtual size: 326KB

.data10 Size: 512B - Virtual size: 100B

.data9 Size: 512B - Virtual size: 100B

.data8 Size: 512B - Virtual size: 100B

.data7 Size: 512B - Virtual size: 100B

.data6 Size: 512B - Virtual size: 100B

.data5 Size: 512B - Virtual size: 100B

.data4 Size: 512B - Virtual size: 100B

.data3 Size: 512B - Virtual size: 100B

.data2 Size: 512B - Virtual size: 100B

.reloc Size: 512B - Virtual size: 176B

6b:41:0a:ca:01:c1:0d:a0:44:fa:77:3c:ef:c7:6a:0a
Certificate

8d:6c:bd:0d:28:94:1f:1e:b6:0b:5b:0c:de:61:90:71:b2:13:e7:bf
Signer

.text
Size: 42KB - Virtual size: 41KB

.data
Size: 326KB - Virtual size: 326KB

.data10
Size: 512B - Virtual size: 100B

.data9
Size: 512B - Virtual size: 100B

.data8
Size: 512B - Virtual size: 100B

.data7
Size: 512B - Virtual size: 100B

.data6
Size: 512B - Virtual size: 100B

.data5
Size: 512B - Virtual size: 100B

.data4
Size: 512B - Virtual size: 100B

.data3
Size: 512B - Virtual size: 100B

.data2
Size: 512B - Virtual size: 100B

.reloc
Size: 512B - Virtual size: 176B