3feb60e0f9f94a7a723712819164079c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3feb60e0f9f94a7a723712819164079c_JaffaCakes118
Size

417KB
MD5

3feb60e0f9f94a7a723712819164079c
SHA1

42c9bb135a626d42b9eef3da69b56873d4a3b299
SHA256

4a951b5a3a10bf6c4fa1028ff7b18aef173c926f5c650a20676fc46ea0ab4234
SHA512

8bc511dc19035ba60f2f541554cbd7bca266ee4febd1468cb03c255667c5f6a57f95a3b63d1c8a1464fd84c5432531a20c2ce2c3328497fa36b6febd3043073c
SSDEEP

12288:5tWhLKgNQww558mKSGkZ7WEeGNcDGLpHL1n2OTGBgTX3czTy:DWFMwAG0GOWBDGLpL1nTGBgLyTy

Score

1^/10

Malware Config

Signatures

Files

3feb60e0f9f94a7a723712819164079c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4e3850f7126659f06f158221657832c

Code Sign

38:6a:67:b9:fe:94:df:81:4d:ca:e3:c9:f1:f7:c2:a2
Certificate

Issuer

CN=Root Agency

Not Before

08-11-2011 14:32

Not After

25-11-2046 22:00

Subject

CN=SZR

Extended Key Usages

ExtKeyUsageCodeSigning

fe:0c:e8:cd:8a:e2:1c:4b:49:9c:fc:c8:be:33:20:21:51:d3:73:cc
Signer

Actual PE Digest

fe:0c:e8:cd:8a:e2:1c:4b:49:9c:fc:c8:be:33:20:21:51:d3:73:cc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glTexGenf
glRasterPos3iv
glEvalPoint2
glRasterPos4dv
glMaterialf
glNormal3d
glGetLightiv
glDrawPixels
glColor3b

glu32

gluErrorString
gluBuild2DMipmaps

ole32

CoRegisterSurrogate
CoUninitialize
CoGetObject
CoFreeLibrary
CreateItemMoniker
CoGetPSClsid

oledlg

ord6

comctl32

ord16
PropertySheetW
ord17
CreateToolbarEx
PropertySheetA

msvcrt

_controlfp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

kernel32

IsValidLocale
GetCurrentProcessId
IsBadReadPtr
IsValidCodePage
LocalUnlock
HeapLock
VirtualLock
IsBadWritePtr
IsBadStringPtrA
GetModuleHandleA
GetProcAddress
ExitProcess
GetStartupInfoA
HeapValidate

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ckr
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rmsboa
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4e3850f7126659f06f158221657832c

Code Sign

38:6a:67:b9:fe:94:df:81:4d:ca:e3:c9:f1:f7:c2:a2Certificate

Extended Key Usages

fe:0c:e8:cd:8a:e2:1c:4b:49:9c:fc:c8:be:33:20:21:51:d3:73:ccSigner

Headers

File Characteristics

Imports

opengl32

glu32

ole32

oledlg

comctl32

msvcrt

kernel32

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 88KB

ckr Size: 269KB - Virtual size: 269KB

rmsboa Size: 123KB - Virtual size: 123KB

.tls Size: 512B - Virtual size: 4B

.rsrc Size: 5KB - Virtual size: 5KB

38:6a:67:b9:fe:94:df:81:4d:ca:e3:c9:f1:f7:c2:a2
Certificate

fe:0c:e8:cd:8a:e2:1c:4b:49:9c:fc:c8:be:33:20:21:51:d3:73:cc
Signer

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 88KB

ckr
Size: 269KB - Virtual size: 269KB

rmsboa
Size: 123KB - Virtual size: 123KB

.tls
Size: 512B - Virtual size: 4B

.rsrc
Size: 5KB - Virtual size: 5KB