35c17da2a6b1ca0fde461589a80301f9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

35c17da2a6b1ca0fde461589a80301f9_JaffaCakes118
Size

179KB
MD5

35c17da2a6b1ca0fde461589a80301f9
SHA1

2935855a10ca5248bccd685e7b6ba259040ef518
SHA256

952f93c8f38cf899c6a5d3fedc33c62b9a709849f64bbd463d993837df4b280c
SHA512

da0d8564d19be9286c2d34fef15f961bef36b2e0a320889e8bd2b10c6353dfc165dc1da34adf94022799ca2a7b4313cb9ce96e1cd30a9ccf46cfd7f901835b46
SSDEEP

3072:IhaohCRlHf+f0W3smpqk2gmc5hskjo2EtAMImsp/GPWLim0t619/uL/LZ24nLkti:uCRtk06pSc7dEtAsspKvLt6MLZtnLkti

Score

1^/10

Malware Config

Signatures

Files

35c17da2a6b1ca0fde461589a80301f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Code Sign

0a:c2:ec:72:b0:75:d4:50:b0:1c:c6:52:3b:30:10:01
Certificate

Issuer

CN=Protected Storage Driver

Not Before

31-12-2008 16:00

Not After

31-12-2014 16:00

Subject

CN=Protected Storage Driver

Extended Key Usages

ExtKeyUsageCodeSigning

be:40:99:a2:20:87:46:40:ce:aa:2c:0f:e6:56:ea:ba:c4:91:bb:ce
Signer

Actual PE Digest

be:40:99:a2:20:87:46:40:ce:aa:2c:0f:e6:56:ea:ba:c4:91:bb:ce

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

=
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

:
Size: - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

)
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

+
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

"
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

:
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 512B - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

,
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

>
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

7
Size: 944B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

0a:c2:ec:72:b0:75:d4:50:b0:1c:c6:52:3b:30:10:01Certificate

Extended Key Usages

be:40:99:a2:20:87:46:40:ce:aa:2c:0f:e6:56:ea:ba:c4:91:bb:ceSigner

Headers

File Characteristics

Sections

= Size: - Virtual size: 18KB

: Size: - Virtual size: 200B

) Size: - Virtual size: 1KB

+ Size: - Virtual size: 1KB

" Size: - Virtual size: 8B

3 Size: 512B - Virtual size: 24B

: Size: - Virtual size: 1KB

. Size: 512B - Virtual size: 128KB

2 Size: - Virtual size: 17KB

, Size: 175KB - Virtual size: 174KB

> Size: 512B - Virtual size: 124B

7 Size: 944B - Virtual size: 944B

0a:c2:ec:72:b0:75:d4:50:b0:1c:c6:52:3b:30:10:01
Certificate

be:40:99:a2:20:87:46:40:ce:aa:2c:0f:e6:56:ea:ba:c4:91:bb:ce
Signer

=
Size: - Virtual size: 18KB

:
Size: - Virtual size: 200B

)
Size: - Virtual size: 1KB

+
Size: - Virtual size: 1KB

"
Size: - Virtual size: 8B

3
Size: 512B - Virtual size: 24B

:
Size: - Virtual size: 1KB

.
Size: 512B - Virtual size: 128KB

2
Size: - Virtual size: 17KB

,
Size: 175KB - Virtual size: 174KB

>
Size: 512B - Virtual size: 124B

7
Size: 944B - Virtual size: 944B