4d122d5196b4f5b569335e06fb11f06f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4d122d5196b4f5b569335e06fb11f06f_JaffaCakes118
Size

154KB
MD5

4d122d5196b4f5b569335e06fb11f06f
SHA1

f7aa76950afb5bf180d546846650fd9305979801
SHA256

65465ff72ec189149bdbc21af50f4b0cb7ab2a729ce4a2037999bfc4bde92cae
SHA512

3eae1db6230a41bcd9af65c022d5f800719276ae29b02b7954e7586b2e8d507fe7335fe37864354cb8df156518a69bef234dc94ea3c8c72484d911b8f1e35ec6
SSDEEP

3072:+MdvHITX0e+ziDVa1KnegrLpV43jplVyP0:jdyPL34llVY0

Score

1^/10

Malware Config

Signatures

Files

4d122d5196b4f5b569335e06fb11f06f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c45b5a02a7efe1517416aa5eb3d7aca0

Code Sign

3a:6d:c4:95:2d:8c:16:5e:b1:23:42:13:b6:b8:00:3a
Certificate

Issuer

CN=917662827519259241998232613267349893382155935642233696728967663828917433641668367874251797792499269277569166177815149659853771216339633626289497491249

Not Before

09/07/2012, 05:21

Not After

31/12/2039, 23:59

Subject

CN=917662827519259241998232613267349893382155935642233696728967663828917433641668367874251797792499269277569166177815149659853771216339633626289497491249

Extended Key Usages

ExtKeyUsageCodeSigning

08:10:90:bf:42:05:c4:5f:5f:77:5e:a8:b9:d6:26:3e:e2:af:7d:d9
Signer

Actual PE Digest

08:10:90:bf:42:05:c4:5f:5f:77:5e:a8:b9:d6:26:3e:e2:af:7d:d9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatW
CreateFileW
CloseHandle
GetWindowsDirectoryW
VirtualAllocEx

advapi32

RegOpenKeyA
RegCloseKey

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data9
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data8
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data7
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data6
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c45b5a02a7efe1517416aa5eb3d7aca0

Code Sign

3a:6d:c4:95:2d:8c:16:5e:b1:23:42:13:b6:b8:00:3aCertificate

Extended Key Usages

08:10:90:bf:42:05:c4:5f:5f:77:5e:a8:b9:d6:26:3e:e2:af:7d:d9Signer

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 772B

.data9 Size: 1024B - Virtual size: 1000B

.data8 Size: 1024B - Virtual size: 1000B

.data7 Size: 1024B - Virtual size: 1000B

.data6 Size: 1024B - Virtual size: 1000B

.data5 Size: 1024B - Virtual size: 1000B

.data4 Size: 1024B - Virtual size: 1000B

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 135KB - Virtual size: 134KB

.reloc Size: 512B - Virtual size: 208B

3a:6d:c4:95:2d:8c:16:5e:b1:23:42:13:b6:b8:00:3a
Certificate

08:10:90:bf:42:05:c4:5f:5f:77:5e:a8:b9:d6:26:3e:e2:af:7d:d9
Signer

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 772B

.data9
Size: 1024B - Virtual size: 1000B

.data8
Size: 1024B - Virtual size: 1000B

.data7
Size: 1024B - Virtual size: 1000B

.data6
Size: 1024B - Virtual size: 1000B

.data5
Size: 1024B - Virtual size: 1000B

.data4
Size: 1024B - Virtual size: 1000B

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 135KB - Virtual size: 134KB

.reloc
Size: 512B - Virtual size: 208B