35938dc745030606fec14b45dec7b21f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

35938dc745030606fec14b45dec7b21f_JaffaCakes118
Size

196KB
MD5

35938dc745030606fec14b45dec7b21f
SHA1

6aaeb659599e28e826ad41d48684008c278f6fce
SHA256

a02be3392160a321f27bcd09e37d9dcc8e921cfb7f2e095a2e8fd529da09771c
SHA512

d02796f2ecc217cef0625e74a69e33fd515f0d6b24b1d041c26135bbc4b03e29fd740d8f5f32595db17f28c229d4c53619df6a6e3b2d2de3b195c0356d2045ae
SSDEEP

3072:89iir1qVemxj9eluh2AblilikUawTxI0KaSUBK6:q1GhNh2NiTITaP

Score

1^/10

Malware Config

Signatures

Files

35938dc745030606fec14b45dec7b21f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4ba127fe6eacb6b5853313f4b9c03263

Code Sign

69:d0:c8:ba:19:31:3f:73:bb:36:a5:a8:73:ac:d0:09
Certificate

Issuer

CN=797871756289634253896562428764717967153361673529868625515891451715252584769788918372438574322411216259565529928552691682658776517582536117728595793761

Not Before

17/07/2012, 06:12

Not After

31/12/2039, 23:59

Subject

CN=797871756289634253896562428764717967153361673529868625515891451715252584769788918372438574322411216259565529928552691682658776517582536117728595793761

Extended Key Usages

ExtKeyUsageCodeSigning

ec:dc:07:51:64:8b:69:93:6c:ad:1e:ce:de:29:9a:65:28:00:c2:60
Signer

Actual PE Digest

ec:dc:07:51:64:8b:69:93:6c:ad:1e:ce:de:29:9a:65:28:00:c2:60

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatW
GetModuleHandleA
GetProcAddress
CreateFileW
GetWindowsDirectoryW
VirtualAllocEx

user32

LoadIconA

advapi32

RegOpenKeyW
RegCloseKey

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ba127fe6eacb6b5853313f4b9c03263

Code Sign

69:d0:c8:ba:19:31:3f:73:bb:36:a5:a8:73:ac:d0:09Certificate

Extended Key Usages

ec:dc:07:51:64:8b:69:93:6c:ad:1e:ce:de:29:9a:65:28:00:c2:60Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 152KB - Virtual size: 151KB

.data Size: 40KB - Virtual size: 40KB

.data2 Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 220B

69:d0:c8:ba:19:31:3f:73:bb:36:a5:a8:73:ac:d0:09
Certificate

ec:dc:07:51:64:8b:69:93:6c:ad:1e:ce:de:29:9a:65:28:00:c2:60
Signer

.text
Size: 152KB - Virtual size: 151KB

.data
Size: 40KB - Virtual size: 40KB

.data2
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 220B