636f12635ae75d1d06f32d8b7eeea45c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

636f12635ae75d1d06f32d8b7eeea45c_JaffaCakes118
Size

298KB
MD5

636f12635ae75d1d06f32d8b7eeea45c
SHA1

c151347f30d310a259ca4bc007d0c7b07e091a27
SHA256

c0bbf67cd457011011519c6aac4af3d299e7ee377ddb9185d88f9e92292dc2b3
SHA512

80c1bf1a63c9fb23cf33d52e644e0c71e6b574be1c8c18c2edb1a65c81287d7406498b38627c4302c3d3e0d9b17f0f6ce2794a10a28e88da0faf305e4f4e1a1a
SSDEEP

6144:2aw+HWSIg118HWULKjC7wif1mO45x4VN0cp0cyIC:2qjIaC7wy45x4ko0cyIC

Score

1^/10

Malware Config

Signatures

Files

636f12635ae75d1d06f32d8b7eeea45c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58616bec97f1f62466ab697e8df6cc5f

Code Sign

4c:35:75:3f:cf:2a:de:ad:46:0c:1f:dd:50:bf:2e:14
Certificate

Issuer

CN=12361235123

Not Before

26/02/2012, 20:29

Not After

31/12/2039, 23:59

Subject

CN=12361235123

Extended Key Usages

ExtKeyUsageCodeSigning

f7:e4:e3:a7:6b:a7:ef:0b:b0:8d:38:89:7f:d6:db:2a:66:58:d2:be
Signer

Actual PE Digest

f7:e4:e3:a7:6b:a7:ef:0b:b0:8d:38:89:7f:d6:db:2a:66:58:d2:be

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
VirtualAlloc

advapi32

RegOpenKeyExW

comctl32

FlatSB_SetScrollProp
FlatSB_GetScrollInfo
ImageList_GetImageCount
ImageList_LoadImage
FlatSB_GetScrollRange
ImageList_Destroy
ord3
ord8
FlatSB_ShowScrollBar
ord16
DestroyPropertySheetPage
GetMUILanguage
_TrackMouseEvent
DrawStatusTextW
ImageList_DrawIndirect
ImageList_BeginDrag
DrawStatusText
ImageList_Remove
ImageList_GetBkColor
CreatePropertySheetPage
ImageList_SetOverlayImage
CreateStatusWindow
ImageList_DragMove
ImageList_SetImageCount
ImageList_Add
ord14
ImageList_Draw
ImageList_AddIcon
FlatSB_SetScrollPos
ImageList_GetDragImage
ImageList_Copy
ord17
ImageList_LoadImageW
CreateStatusWindowW
ImageList_Replace
PropertySheetA
FlatSB_GetScrollPos
ord15
ord4
ImageList_SetIconSize
ImageList_DrawEx
ImageList_GetIconSize
ord6
InitMUILanguage
UninitializeFlatSB
ImageList_Duplicate
ord5
ImageList_SetDragCursorImage
FlatSB_SetScrollInfo
CreatePropertySheetPageW
ImageList_GetImageRect
ImageList_LoadImageA
InitCommonControlsEx
ImageList_EndDrag
ord2
ImageList_AddMasked
ImageList_DragShowNolock
ImageList_SetBkColor
FlatSB_GetScrollProp
ImageList_Write

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text11
Size: 273KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text12
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textMM3
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textMM4
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textMM1
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textMM5
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textMM6
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textMM7
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textMM8
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textMM9
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textM10
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textM11
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textM12
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58616bec97f1f62466ab697e8df6cc5f

Code Sign

4c:35:75:3f:cf:2a:de:ad:46:0c:1f:dd:50:bf:2e:14Certificate

Extended Key Usages

f7:e4:e3:a7:6b:a7:ef:0b:b0:8d:38:89:7f:d6:db:2a:66:58:d2:beSigner

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

Sections

.text Size: 3KB - Virtual size: 2KB

.text11 Size: 273KB - Virtual size: 273KB

.text12 Size: 1024B - Virtual size: 912B

.textMM3 Size: 512B - Virtual size: 500B

.textMM4 Size: 512B - Virtual size: 500B

.textMM1 Size: 512B - Virtual size: 500B

.textMM5 Size: 512B - Virtual size: 500B

.textMM6 Size: 512B - Virtual size: 500B

.textMM7 Size: 512B - Virtual size: 500B

.textMM8 Size: 512B - Virtual size: 500B

.textMM9 Size: 512B - Virtual size: 500B

.textM10 Size: 512B - Virtual size: 500B

.textM11 Size: 512B - Virtual size: 500B

.textM12 Size: 512B - Virtual size: 500B

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 1024B - Virtual size: 520B

4c:35:75:3f:cf:2a:de:ad:46:0c:1f:dd:50:bf:2e:14
Certificate

f7:e4:e3:a7:6b:a7:ef:0b:b0:8d:38:89:7f:d6:db:2a:66:58:d2:be
Signer

.text
Size: 3KB - Virtual size: 2KB

.text11
Size: 273KB - Virtual size: 273KB

.text12
Size: 1024B - Virtual size: 912B

.textMM3
Size: 512B - Virtual size: 500B

.textMM4
Size: 512B - Virtual size: 500B

.textMM1
Size: 512B - Virtual size: 500B

.textMM5
Size: 512B - Virtual size: 500B

.textMM6
Size: 512B - Virtual size: 500B

.textMM7
Size: 512B - Virtual size: 500B

.textMM8
Size: 512B - Virtual size: 500B

.textMM9
Size: 512B - Virtual size: 500B

.textM10
Size: 512B - Virtual size: 500B

.textM11
Size: 512B - Virtual size: 500B

.textM12
Size: 512B - Virtual size: 500B

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 1024B - Virtual size: 520B