3c596bd1778678525b11105b15574d7a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3c596bd1778678525b11105b15574d7a_JaffaCakes118
Size

422KB
MD5

3c596bd1778678525b11105b15574d7a
SHA1

3057b8f0ea02d157a50a1a89bb0d6a07eda62af9
SHA256

e3403b6b148058f038ddb2727cc8b5da6094efaeed0dec67634490681da0395e
SHA512

ca78acac6e171a19d6087a5a7ac418867b34a3ec8b11bd30aa9875a750f8360cde75efb257605aaeccb55d773a4f364084875851055e0cf435a0f780a7b0406d
SSDEEP

12288:lpwqoNP9Pa29NcX/8XmzgC4xfNBOLGmyV4w:AX7aSccvZnOHyyw

Score

1^/10

Malware Config

Signatures

Files

3c596bd1778678525b11105b15574d7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0baf4eb2e557091f1be931c741c8c39b

Code Sign

06:8c:44:a5:fd:53:88:4e:b9:0e:76:bb:19:2f:9a:11
Certificate

Issuer

CN=lpqaeutfxsi

Not Before

20-11-2011 12:23

Not After

19-06-2023 22:00

Subject

CN=Kiteruye

eb:1e:6e:a8:bf:b7:31:d9:48:f8:4a:31:d4:b6:fd:1c:e4:7f:1f:8b
Signer

Actual PE Digest

eb:1e:6e:a8:bf:b7:31:d9:48:f8:4a:31:d4:b6:fd:1c:e4:7f:1f:8b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DeferWindowPos
GetDialogBaseUnits
CreateDialogParamA
SetWindowPlacement
GetClientRect
SendMessageA
ReplyMessage
RegisterWindowMessageA
EndDialog

ole32

CoLockObjectExternal
CoUnmarshalHresult
OleDoAutoConvert
OleCreateFromData
CoCreateInstance
CreateClassMoniker

oleaut32

OleIconToCursor

kernel32

GetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WriteFile
GetModuleHandleA
GetProcAddress
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mqble
Size: 286KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sru
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0baf4eb2e557091f1be931c741c8c39b

Code Sign

06:8c:44:a5:fd:53:88:4e:b9:0e:76:bb:19:2f:9a:11Certificate

eb:1e:6e:a8:bf:b7:31:d9:48:f8:4a:31:d4:b6:fd:1c:e4:7f:1f:8bSigner

Headers

File Characteristics

Imports

user32

ole32

oleaut32

kernel32

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 97KB

mqble Size: 286KB - Virtual size: 285KB

sru Size: 107KB - Virtual size: 106KB

.rsrc Size: 5KB - Virtual size: 5KB

06:8c:44:a5:fd:53:88:4e:b9:0e:76:bb:19:2f:9a:11
Certificate

eb:1e:6e:a8:bf:b7:31:d9:48:f8:4a:31:d4:b6:fd:1c:e4:7f:1f:8b
Signer

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 97KB

mqble
Size: 286KB - Virtual size: 285KB

sru
Size: 107KB - Virtual size: 106KB

.rsrc
Size: 5KB - Virtual size: 5KB