2f7cf1b791d27e1535830144edff03d2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2f7cf1b791d27e1535830144edff03d2_JaffaCakes118
Size

1.1MB
MD5

2f7cf1b791d27e1535830144edff03d2
SHA1

788fdf8b43ff25e234d393255c06734c1729c01f
SHA256

97286cba5ddd3b3e5dcb4305e6d745a435b62b007cd8aeea5e081d199d859036
SHA512

bd844589b9aafa996107c04d231f5c83665f232d8d08cb5c277361c5f0a659c3ff685a66d5e93e4438cc06490c7ec36c3400d3f04adebba1d94dcf2943a6c81b
SSDEEP

24576:aiko0e8vjnQlRX41zC1npItEW+aq0xx7iWja7fbxyW2xox:aiWXbQlRI01n2FZjbjKYWmq

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Ad Muncher 4.91 Build 32562 Final/AM-Install_491_32562.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Ad Muncher 4.91 Build 32562 Final/crack/AML_v491_b32562.exe

Files

2f7cf1b791d27e1535830144edff03d2_JaffaCakes118
.rar
Ad Muncher 4.91 Build 32562 Final/AM-Install_491_32562.exe
.exe windows:1 windows x86 arch:x86

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

1c:5f:ae:90:a4:06:13:8e:52:b5:f6:6f:ac:16:6f:b2
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/06/2010, 00:00

Not After

08/06/2013, 23:59

Subject

CN=Murray Hurps,O=Murray Hurps,POSTALCODE=2765,STREET=160 Old Pitt Town Rd,L=Box Hill,ST=NSW,C=AU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

a1:28:f8:06:cd:eb:5f:65:85:cf:db:cf:49:19:5c:b9:0b:b5:c8:75
Signer

Actual PE Digest

a1:28:f8:06:cd:eb:5f:65:85:cf:db:cf:49:19:5c:b9:0b:b5:c8:75

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 4.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 495KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Ad Muncher 4.91 Build 32562 Final/crack/AML_v491_b32562.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 46KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 178KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 172KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Ad Muncher 4.91 Build 32562 Final/Инструкция.txt
Ad Muncher 4.91 Build 32562 Final/премиум база.rar
.rar
AM.adl

Sharing

General

Malware Config

Signatures

Files

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:beCertificate

Extended Key Usages

Key Usages

1c:5f:ae:90:a4:06:13:8e:52:b5:f6:6f:ac:16:6f:b2Certificate

Extended Key Usages

Key Usages

a1:28:f8:06:cd:eb:5f:65:85:cf:db:cf:49:19:5c:b9:0b:b5:c8:75Signer

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 4.1MB

UPX1 Size: 495KB - Virtual size: 496KB

.rsrc Size: 23KB - Virtual size: 24KB

Headers

File Characteristics

Sections

Size: 46KB - Virtual size: 96KB

Size: 1024B - Virtual size: 4KB

Size: - Virtual size: 8KB

Size: 3KB - Virtual size: 4KB

Size: - Virtual size: 4KB

Size: 512B - Virtual size: 4KB

Size: - Virtual size: 8KB

.rsrc Size: 178KB - Virtual size: 188KB

.data Size: 172KB - Virtual size: 176KB

.adata Size: - Virtual size: 4KB

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

1c:5f:ae:90:a4:06:13:8e:52:b5:f6:6f:ac:16:6f:b2
Certificate

a1:28:f8:06:cd:eb:5f:65:85:cf:db:cf:49:19:5c:b9:0b:b5:c8:75
Signer

UPX0
Size: - Virtual size: 4.1MB

UPX1
Size: 495KB - Virtual size: 496KB

.rsrc
Size: 23KB - Virtual size: 24KB

.rsrc
Size: 178KB - Virtual size: 188KB

.data
Size: 172KB - Virtual size: 176KB

.adata
Size: - Virtual size: 4KB