328e875e1d8663a9c5d4cb3a57f52968_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

328e875e1d8663a9c5d4cb3a57f52968_JaffaCakes118
Size

241KB
MD5

328e875e1d8663a9c5d4cb3a57f52968
SHA1

62cad3b6c4e8cb3d5ef22162bef994d0881e6cc7
SHA256

68ad78bec8031c348a8a7b479157ba7244e8852f2a411793d55e3c0dbdd159fa
SHA512

4b21b598acdd39947701780e6bcb89efb5ace8268205639aaa9f6ead777d57aa597215173d6d1cd93b2352c845d03422c362255638b3a2acd4c8a74bdac02db4
SSDEEP

6144:UvEtfis6Uim3LWB0bEG55ab0Rnq9FR3GbjOy:YEtqs6UQBAY0RnqMbjOy

Score

1^/10

Malware Config

Signatures

Files

328e875e1d8663a9c5d4cb3a57f52968_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c2e1498d1f05b9b60b40a6a06262b0e2

Code Sign

4f:20:58:14:5f:55:8f:b9:4e:2b:23:7b:f1:d9:51:c7
Certificate

Issuer

CN=dsfbyhebrt

Not Before

29/02/2012, 09:29

Not After

31/12/2039, 23:59

Subject

CN=dsfbyhebrt

Extended Key Usages

ExtKeyUsageCodeSigning

ce:9e:d5:75:f1:da:18:ec:76:f8:6d:3d:6a:b6:28:f5:ad:c7:56:13
Signer

Actual PE Digest

ce:9e:d5:75:f1:da:18:ec:76:f8:6d:3d:6a:b6:28:f5:ad:c7:56:13

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
AddAtomA
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
VirtualAlloc

advapi32

RegOpenKeyA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textFF4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textFF7
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textFF8
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textFF1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textFF5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textFF6
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textFF9
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textF9
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textFF3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textFF2
Size: 227KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2e1498d1f05b9b60b40a6a06262b0e2

Code Sign

4f:20:58:14:5f:55:8f:b9:4e:2b:23:7b:f1:d9:51:c7Certificate

Extended Key Usages

ce:9e:d5:75:f1:da:18:ec:76:f8:6d:3d:6a:b6:28:f5:ad:c7:56:13Signer

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 2KB - Virtual size: 1KB

.textFF4 Size: 1024B - Virtual size: 1000B

.textFF7 Size: 1024B - Virtual size: 1000B

.textFF8 Size: 1024B - Virtual size: 1000B

.textFF1 Size: 1024B - Virtual size: 1000B

.textFF5 Size: 1024B - Virtual size: 1000B

.textFF6 Size: 1024B - Virtual size: 1000B

.textFF9 Size: 1024B - Virtual size: 1000B

.textF9 Size: 1024B - Virtual size: 1000B

.textFF3 Size: 1024B - Virtual size: 1000B

.textFF2 Size: 227KB - Virtual size: 227KB

.data Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 120B

4f:20:58:14:5f:55:8f:b9:4e:2b:23:7b:f1:d9:51:c7
Certificate

ce:9e:d5:75:f1:da:18:ec:76:f8:6d:3d:6a:b6:28:f5:ad:c7:56:13
Signer

.text
Size: 2KB - Virtual size: 1KB

.textFF4
Size: 1024B - Virtual size: 1000B

.textFF7
Size: 1024B - Virtual size: 1000B

.textFF8
Size: 1024B - Virtual size: 1000B

.textFF1
Size: 1024B - Virtual size: 1000B

.textFF5
Size: 1024B - Virtual size: 1000B

.textFF6
Size: 1024B - Virtual size: 1000B

.textFF9
Size: 1024B - Virtual size: 1000B

.textF9
Size: 1024B - Virtual size: 1000B

.textFF3
Size: 1024B - Virtual size: 1000B

.textFF2
Size: 227KB - Virtual size: 227KB

.data
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 120B