7162df5c7dcfeaf5a182aaeeb30684e2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7162df5c7dcfeaf5a182aaeeb30684e2_JaffaCakes118
Size

186KB
MD5

7162df5c7dcfeaf5a182aaeeb30684e2
SHA1

c6255fc586b618e9174866f2fc9c9be5bb298749
SHA256

641ab5b3746227d536752ef72c5fa2d77158061ffc4c4c2b9bcb3485bcc317e8
SHA512

e9f81e3250998457816aede801e4b11b48fd47c162e655c5f45dd68c624161a920524d66659efaeae5b60ad4606a357dd0a6123b71f874f9c906d2be02ce2cfc
SSDEEP

3072:+vqgfxc38NizOJ0yfzxk1b4+ThAWvizOa1DoHotRRRAqFASG4mILB1cH:D3EizG0yfzSuuWRF8HoHEqASGyE

Score

1^/10

Malware Config

Signatures

Files

7162df5c7dcfeaf5a182aaeeb30684e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Code Sign

0a:c2:ec:72:b0:75:d4:50:b0:1c:c6:52:3b:30:10:01
Certificate

Issuer

CN=Protected Storage Driver

Not Before

31/12/2008, 16:00

Not After

31/12/2014, 16:00

Subject

CN=Protected Storage Driver

Extended Key Usages

ExtKeyUsageCodeSigning

4f:b0:db:5b:4b:6c:0e:ad:75:b3:67:bd:99:29:60:10:de:f0:13:7e
Signer

Actual PE Digest

4f:b0:db:5b:4b:6c:0e:ad:75:b3:67:bd:99:29:60:10:de:f0:13:7e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

%
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

*
Size: - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

)
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

"
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

>
Size: 512B - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

%
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

7
Size: 955B - Virtual size: 955B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

0a:c2:ec:72:b0:75:d4:50:b0:1c:c6:52:3b:30:10:01Certificate

Extended Key Usages

4f:b0:db:5b:4b:6c:0e:ad:75:b3:67:bd:99:29:60:10:de:f0:13:7eSigner

Headers

File Characteristics

Sections

% Size: - Virtual size: 18KB

* Size: - Virtual size: 200B

) Size: - Virtual size: 1KB

" Size: - Virtual size: 1KB

3 Size: - Virtual size: 8B

4 Size: 512B - Virtual size: 24B

/ Size: - Virtual size: 1KB

> Size: 512B - Virtual size: 128KB

% Size: - Virtual size: 21KB

8 Size: 182KB - Virtual size: 181KB

6 Size: 512B - Virtual size: 180B

7 Size: 955B - Virtual size: 955B

0a:c2:ec:72:b0:75:d4:50:b0:1c:c6:52:3b:30:10:01
Certificate

4f:b0:db:5b:4b:6c:0e:ad:75:b3:67:bd:99:29:60:10:de:f0:13:7e
Signer

%
Size: - Virtual size: 18KB

*
Size: - Virtual size: 200B

)
Size: - Virtual size: 1KB

"
Size: - Virtual size: 1KB

3
Size: - Virtual size: 8B

4
Size: 512B - Virtual size: 24B

/
Size: - Virtual size: 1KB

>
Size: 512B - Virtual size: 128KB

%
Size: - Virtual size: 21KB

8
Size: 182KB - Virtual size: 181KB

6
Size: 512B - Virtual size: 180B

7
Size: 955B - Virtual size: 955B