4b413398d632d3a7175c3312f5b328ed_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4b413398d632d3a7175c3312f5b328ed_JaffaCakes118
Size

21.2MB
MD5

4b413398d632d3a7175c3312f5b328ed
SHA1

5059f0ee97eb989d5eead212c8f0a74a9f5276e7
SHA256

b2200dbaee5f18734b163978abcaeab50fd34ee300e2cf6be6b9172c086a61d0
SHA512

80528f67dccbb750ac7aebafeee02548ca1ef9659038d635b32d4aef1f7a9e3a4f14d8ecca38dda330b01512d47b34d29cf630ebe0067418708c6cc96b95c89e
SSDEEP

6144:5L8dxTuJUIyky70RVAobo4/69xq8FAopd+H8u8np2:54dxxx8F69xUQp2

Score

1^/10

Malware Config

Signatures

Files

4b413398d632d3a7175c3312f5b328ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a394cc5145a0a1216f0ccbdeb14a8fc8

Code Sign

0f:05:05:ae:8b:e9:b8:bd:4e:fc:a0:60:c8:94:3d:2a
Certificate

Issuer

CN=1,1.2.840.113549.1.9.1=#130131,0.0=#130131

Not Before

31/12/2007, 16:00

Not After

31/12/2107, 16:00

Subject

CN=1,1.2.840.113549.1.9.1=#130131,0.0=#130131

bc:6a:90:0c:1f:c4:76:2f:b4:08:f7:c9:1a:93:c0:f6:b9:2c:26:11
Signer

Actual PE Digest

bc:6a:90:0c:1f:c4:76:2f:b4:08:f7:c9:1a:93:c0:f6:b9:2c:26:11

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
RtlUnwind
LCMapStringA
ExitProcess
CreateFileA

user32

CreateWindowExA
CloseWindow
SetWindowLongA
CharLowerBuffA

advapi32

RegCreateKeyA
RegDeleteKeyA
RegEnumValueA
RegOpenKeyA

ole32

CoRegisterClassObject
CoCreateInstance
CoCreateInstanceEx

Sections

CODE
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.!rc!
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jttk
Size: 21.0MB - Virtual size: 21.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a394cc5145a0a1216f0ccbdeb14a8fc8

Code Sign

0f:05:05:ae:8b:e9:b8:bd:4e:fc:a0:60:c8:94:3d:2aCertificate

bc:6a:90:0c:1f:c4:76:2f:b4:08:f7:c9:1a:93:c0:f6:b9:2c:26:11Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

CODE Size: 10KB - Virtual size: 18KB

.data Size: 85KB - Virtual size: 166KB

.!rc! Size: 1024B - Virtual size: 1KB

.idata2 Size: 1024B - Virtual size: 4KB

.rsrc Size: 6KB - Virtual size: 8KB

.vmp0 Size: 12KB - Virtual size: 14KB

.adata Size: 68KB - Virtual size: 114KB

.jttk Size: 21.0MB - Virtual size: 21.0MB

0f:05:05:ae:8b:e9:b8:bd:4e:fc:a0:60:c8:94:3d:2a
Certificate

bc:6a:90:0c:1f:c4:76:2f:b4:08:f7:c9:1a:93:c0:f6:b9:2c:26:11
Signer

CODE
Size: 10KB - Virtual size: 18KB

.data
Size: 85KB - Virtual size: 166KB

.!rc!
Size: 1024B - Virtual size: 1KB

.idata2
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 6KB - Virtual size: 8KB

.vmp0
Size: 12KB - Virtual size: 14KB

.adata
Size: 68KB - Virtual size: 114KB

.jttk
Size: 21.0MB - Virtual size: 21.0MB