3174540dd1d296b32aec343782bc5a04_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3174540dd1d296b32aec343782bc5a04_JaffaCakes118
Size

124KB
MD5

3174540dd1d296b32aec343782bc5a04
SHA1

2c2549e1291b54d4d2ba96b7b618669673a4407b
SHA256

43cc8e75e77d1266f67066031590831403eb58a07673c8d236173b4ce28bc49e
SHA512

33335c8ee6bec5f666efec2e46973e1a20574dd75d2048ec64cc33812af143dc26b9e09cf0d95cc1fca015a092e92df93d8a7a7d60a3368663057be27e88c960
SSDEEP

1536:li/z17LYULdXyvIgU1aefMBiohuTX0lCa/iNtIXXllvKMd4aQlfmvoMX8U3I5q+L:liaUMgggoBtwr0oOXX1d4d+vrIHZ9

Score

1^/10

Malware Config

Signatures

Files

3174540dd1d296b32aec343782bc5a04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25503313f00cbd95ab74807f492d4680

Code Sign

78:c3:9a:b6:34:aa:69:af:4b:d0:e0:61:b2:eb:8f:c2
Certificate

Issuer

CN=745151523473828749344452357275986644156596975679379247834998615149872657872319825765771313563416948333348556489778289253257224968431186231535688433375

Not Before

17/07/2012, 07:53

Not After

31/12/2039, 23:59

Subject

CN=745151523473828749344452357275986644156596975679379247834998615149872657872319825765771313563416948333348556489778289253257224968431186231535688433375

Extended Key Usages

ExtKeyUsageCodeSigning

0a:84:d4:08:77:3c:18:cd:dd:09:42:18:ce:c4:bd:30:84:c5:55:b5
Signer

Actual PE Digest

0a:84:d4:08:77:3c:18:cd:dd:09:42:18:ce:c4:bd:30:84:c5:55:b5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetCommandLineA
GetModuleHandleW
GetProcAddress
LoadLibraryW
GetWindowsDirectoryW
lstrcatW
CloseHandle
GetModuleHandleA
GetStartupInfoA

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data14
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data13
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data12
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data11
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data10
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data9
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data8
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data7
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data6
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

25503313f00cbd95ab74807f492d4680

Code Sign

78:c3:9a:b6:34:aa:69:af:4b:d0:e0:61:b2:eb:8f:c2Certificate

Extended Key Usages

0a:84:d4:08:77:3c:18:cd:dd:09:42:18:ce:c4:bd:30:84:c5:55:b5Signer

Headers

File Characteristics

Imports

kernel32

msvcrt

advapi32

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 104KB - Virtual size: 104KB

.data14 Size: 512B - Virtual size: 100B

.data13 Size: 512B - Virtual size: 100B

.data12 Size: 512B - Virtual size: 100B

.data11 Size: 512B - Virtual size: 100B

.data10 Size: 512B - Virtual size: 100B

.data9 Size: 512B - Virtual size: 100B

.data8 Size: 512B - Virtual size: 100B

.data7 Size: 512B - Virtual size: 100B

.data6 Size: 512B - Virtual size: 100B

.data5 Size: 512B - Virtual size: 100B

.data4 Size: 512B - Virtual size: 100B

.data3 Size: 512B - Virtual size: 100B

.data2 Size: 512B - Virtual size: 100B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 228B

78:c3:9a:b6:34:aa:69:af:4b:d0:e0:61:b2:eb:8f:c2
Certificate

0a:84:d4:08:77:3c:18:cd:dd:09:42:18:ce:c4:bd:30:84:c5:55:b5
Signer

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 104KB - Virtual size: 104KB

.data14
Size: 512B - Virtual size: 100B

.data13
Size: 512B - Virtual size: 100B

.data12
Size: 512B - Virtual size: 100B

.data11
Size: 512B - Virtual size: 100B

.data10
Size: 512B - Virtual size: 100B

.data9
Size: 512B - Virtual size: 100B

.data8
Size: 512B - Virtual size: 100B

.data7
Size: 512B - Virtual size: 100B

.data6
Size: 512B - Virtual size: 100B

.data5
Size: 512B - Virtual size: 100B

.data4
Size: 512B - Virtual size: 100B

.data3
Size: 512B - Virtual size: 100B

.data2
Size: 512B - Virtual size: 100B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 228B