49f91a1597bc4dd25d3d23302125dae7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

49f91a1597bc4dd25d3d23302125dae7_JaffaCakes118
Size

109KB
MD5

49f91a1597bc4dd25d3d23302125dae7
SHA1

cfbc110a8f6bdaad10463aaa761cfd2db8e7cd77
SHA256

aadb79ae5fb91a99c6494d775f157b1594b0ddd69520d85fbf1fbff725a769d6
SHA512

ade261293c493dbd6610b461485a8724e763f3d4f9411464c441b7697f3d11bdaf2db605ef5b7972f7e990b55c1cb2aa6d4b14e91f40b6ad64b2fca97858431f
SSDEEP

1536:PTraAg6weVtDASIUh5gOH3u17bZPJ6DwpyLJrnlIsyo:PvX6Y5jMb7ByBIzo

Score

1^/10

Malware Config

Signatures

Files

49f91a1597bc4dd25d3d23302125dae7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5cc5f65225f24f0f8c6c7c1da0c021f1

Code Sign

3e:30:9f:2e:56:a8:14:94:41:10:a1:ee:46:dc:47:be
Certificate

Issuer

CN=Eay0

Not Before

09/06/2012, 07:20

Not After

31/12/2039, 23:59

Subject

CN=Eay0

Extended Key Usages

ExtKeyUsageCodeSigning

c2:09:39:fe:6b:18:8f:23:93:eb:e3:f0:90:0e:3d:93:ef:55:1f:48
Signer

Actual PE Digest

c2:09:39:fe:6b:18:8f:23:93:eb:e3:f0:90:0e:3d:93:ef:55:1f:48

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW
GetCommandLineA
ReadFile

user32

GetDC
ReleaseDC
PostQuitMessage
InvalidateRect
BeginPaint
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA

gdi32

GetStockObject
SelectObject
GetTextMetricsA
SetBkMode
TextOutA

msvcrt

memcpy

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5cc5f65225f24f0f8c6c7c1da0c021f1

Code Sign

3e:30:9f:2e:56:a8:14:94:41:10:a1:ee:46:dc:47:beCertificate

Extended Key Usages

c2:09:39:fe:6b:18:8f:23:93:eb:e3:f0:90:0e:3d:93:ef:55:1f:48Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

Sections

.text Size: 22KB - Virtual size: 22KB

.data Size: 79KB - Virtual size: 79KB

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 1024B - Virtual size: 1000B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 8KB

3e:30:9f:2e:56:a8:14:94:41:10:a1:ee:46:dc:47:be
Certificate

c2:09:39:fe:6b:18:8f:23:93:eb:e3:f0:90:0e:3d:93:ef:55:1f:48
Signer

.text
Size: 22KB - Virtual size: 22KB

.data
Size: 79KB - Virtual size: 79KB

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 8KB