69e374cd99ef8fab63391729714472fa_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

69e374cd99ef8fab63391729714472fa_JaffaCakes118
Size

274KB
MD5

69e374cd99ef8fab63391729714472fa
SHA1

bcda772d1ff321cb52897d0fdd482e61aa5059c5
SHA256

9c7f4a04c31ca20f2f5a422db2d41fe17635d702f63b8113f85a242e893f6f66
SHA512

8e03ad398fe4b18b5c4870bc5c8ee6687c064942e353bd96ff7ed49b0174216bf3d957956aca6d668fd2b34ee8390776f3a9f994f9cb17f850dc0afc4125bbc6
SSDEEP

6144:LdNauEAlzPWzCWBW5V9xbi9OD5fF6/1gGHdfa8:ZNDE7zCW8DiofF9GBa8

Score

1^/10

Malware Config

Signatures

Files

69e374cd99ef8fab63391729714472fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ed543809f2bc57668d56b4ce3b82166a

Code Sign

64:4e:12:4a:eb:7d:2c:ad:41:6b:ab:6e:e2:61:d7:5e
Certificate

Issuer

CN=ADt82UxX8ndawrW

Not Before

06/04/2012, 06:24

Not After

31/12/2039, 23:59

Subject

CN=ADt82UxX8ndawrW

Extended Key Usages

ExtKeyUsageCodeSigning

17:d0:b8:de:29:20:46:a2:26:c3:d4:d6:d0:7b:02:bd:db:ea:a3:42
Signer

Actual PE Digest

17:d0:b8:de:29:20:46:a2:26:c3:d4:d6:d0:7b:02:bd:db:ea:a3:42

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetWindowsDirectoryA
lstrcatA
CreateFileA

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l7
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l6
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed543809f2bc57668d56b4ce3b82166a

Code Sign

64:4e:12:4a:eb:7d:2c:ad:41:6b:ab:6e:e2:61:d7:5eCertificate

Extended Key Usages

17:d0:b8:de:29:20:46:a2:26:c3:d4:d6:d0:7b:02:bd:db:ea:a3:42Signer

Headers

File Characteristics

Imports

kernel32

msvcrt

advapi32

Sections

.text Size: 264KB - Virtual size: 264KB

.data Size: 1024B - Virtual size: 884B

.l7 Size: 1024B - Virtual size: 1000B

.l6 Size: 1024B - Virtual size: 1000B

.l5 Size: 1024B - Virtual size: 1000B

.l4 Size: 1024B - Virtual size: 1000B

.l3 Size: 1024B - Virtual size: 1000B

.l2 Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 88B

64:4e:12:4a:eb:7d:2c:ad:41:6b:ab:6e:e2:61:d7:5e
Certificate

17:d0:b8:de:29:20:46:a2:26:c3:d4:d6:d0:7b:02:bd:db:ea:a3:42
Signer

.text
Size: 264KB - Virtual size: 264KB

.data
Size: 1024B - Virtual size: 884B

.l7
Size: 1024B - Virtual size: 1000B

.l6
Size: 1024B - Virtual size: 1000B

.l5
Size: 1024B - Virtual size: 1000B

.l4
Size: 1024B - Virtual size: 1000B

.l3
Size: 1024B - Virtual size: 1000B

.l2
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 88B