69856eb054be97851ceb1b60d8c356f1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

69856eb054be97851ceb1b60d8c356f1_JaffaCakes118
Size

270KB
MD5

69856eb054be97851ceb1b60d8c356f1
SHA1

4c9a2b27dc327a7f970e046bac036cd8df85fb76
SHA256

f9692e7181342625ee887b9300deb624ca6ca1749e206b4e5388fdea99eaf74f
SHA512

8440ed908ed21ca0cadad1618299703c6e7754654b26ed52270a8ede3855c2b99974fb3756978109f5a6a8ca4a5210e8793af54c565606e0f9fc44e343ceba3b
SSDEEP

6144:mg9i89s1cdzRTxN1OfIy5P1R1FUb9Yl5rSHEvkSVH6qIceYsCK3C3:b939s1cdRn1CtVVro6fH624CP

Score

1^/10

Malware Config

Signatures

Files

69856eb054be97851ceb1b60d8c356f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6b9626a3d7cd225a5a53bbea77d9eb2

Code Sign

6c:11:47:2e:00:cf:a0:6c:b3:22:e2:36:f7:b5:ad:21
Certificate

Issuer

CN=j99zWTOf8FdlY6t

Not Before

05/04/2012, 07:07

Not After

31/12/2039, 23:59

Subject

CN=j99zWTOf8FdlY6t

Extended Key Usages

ExtKeyUsageCodeSigning

4a:b7:38:cd:29:9d:b2:a0:42:b3:5c:53:5b:06:26:77:aa:97:6b:c7
Signer

Actual PE Digest

4a:b7:38:cd:29:9d:b2:a0:42:b3:5c:53:5b:06:26:77:aa:97:6b:c7

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetWindowsDirectoryA
lstrcatA
GetModuleHandleA
GetProcAddress

gdi32

GetStockObject

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 261KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l7
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l6
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6b9626a3d7cd225a5a53bbea77d9eb2

Code Sign

6c:11:47:2e:00:cf:a0:6c:b3:22:e2:36:f7:b5:ad:21Certificate

Extended Key Usages

4a:b7:38:cd:29:9d:b2:a0:42:b3:5c:53:5b:06:26:77:aa:97:6b:c7Signer

Headers

File Characteristics

Imports

kernel32

gdi32

msvcrt

advapi32

Sections

.text Size: 261KB - Virtual size: 260KB

.data Size: 1024B - Virtual size: 1KB

.l7 Size: 1024B - Virtual size: 1000B

.l6 Size: 1024B - Virtual size: 1000B

.l5 Size: 1024B - Virtual size: 1000B

.l4 Size: 1024B - Virtual size: 1000B

.l3 Size: 1024B - Virtual size: 1000B

.l2 Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 108B

6c:11:47:2e:00:cf:a0:6c:b3:22:e2:36:f7:b5:ad:21
Certificate

4a:b7:38:cd:29:9d:b2:a0:42:b3:5c:53:5b:06:26:77:aa:97:6b:c7
Signer

.text
Size: 261KB - Virtual size: 260KB

.data
Size: 1024B - Virtual size: 1KB

.l7
Size: 1024B - Virtual size: 1000B

.l6
Size: 1024B - Virtual size: 1000B

.l5
Size: 1024B - Virtual size: 1000B

.l4
Size: 1024B - Virtual size: 1000B

.l3
Size: 1024B - Virtual size: 1000B

.l2
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 108B