3668a7f109b0f952e59ba0c82ed71862_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3668a7f109b0f952e59ba0c82ed71862_JaffaCakes118
Size

274KB
MD5

3668a7f109b0f952e59ba0c82ed71862
SHA1

a92a26013fcf9fedf17efe7874b50cc69aee9c85
SHA256

4986debef2e4ada67f4a6a80e4448d125e4dced0f97eeabdd07fb74c2d560210
SHA512

d9ff1f76007f4bdd47e4fe23fd6d071bf1720ace802be777383a13b70966600c0063bb8d1e792a8a807976314007a220af306d5612069c2a09935db52de92b71
SSDEEP

6144:FdNauEklzPWzCWBW5V9Obi9OD5ft6/1gGHdfaW3:LNDEXzCW84ioft9GBaS

Score

1^/10

Malware Config

Signatures

Files

3668a7f109b0f952e59ba0c82ed71862_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ed543809f2bc57668d56b4ce3b82166a

Code Sign

30:7f:4c:83:34:bd:f8:47:b5:09:52:98:7f:54:f8:52
Certificate

Issuer

CN=rUeBjQL4LC8d4wI

Not Before

05-04-2012 15:06

Not After

31-12-2039 23:59

Subject

CN=rUeBjQL4LC8d4wI

Extended Key Usages

ExtKeyUsageCodeSigning

9e:de:f5:10:47:c5:67:cd:16:24:ae:e8:fa:a9:0f:10:5d:eb:c5:9b
Signer

Actual PE Digest

9e:de:f5:10:47:c5:67:cd:16:24:ae:e8:fa:a9:0f:10:5d:eb:c5:9b

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetWindowsDirectoryA
lstrcatA
CreateFileA

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l7
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l6
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed543809f2bc57668d56b4ce3b82166a

Code Sign

30:7f:4c:83:34:bd:f8:47:b5:09:52:98:7f:54:f8:52Certificate

Extended Key Usages

9e:de:f5:10:47:c5:67:cd:16:24:ae:e8:fa:a9:0f:10:5d:eb:c5:9bSigner

Headers

File Characteristics

Imports

kernel32

msvcrt

advapi32

Sections

.text Size: 264KB - Virtual size: 264KB

.data Size: 1024B - Virtual size: 884B

.l7 Size: 1024B - Virtual size: 1000B

.l6 Size: 1024B - Virtual size: 1000B

.l5 Size: 1024B - Virtual size: 1000B

.l4 Size: 1024B - Virtual size: 1000B

.l3 Size: 1024B - Virtual size: 1000B

.l2 Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 88B

30:7f:4c:83:34:bd:f8:47:b5:09:52:98:7f:54:f8:52
Certificate

9e:de:f5:10:47:c5:67:cd:16:24:ae:e8:fa:a9:0f:10:5d:eb:c5:9b
Signer

.text
Size: 264KB - Virtual size: 264KB

.data
Size: 1024B - Virtual size: 884B

.l7
Size: 1024B - Virtual size: 1000B

.l6
Size: 1024B - Virtual size: 1000B

.l5
Size: 1024B - Virtual size: 1000B

.l4
Size: 1024B - Virtual size: 1000B

.l3
Size: 1024B - Virtual size: 1000B

.l2
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 88B