7036cab8a17887dba5447a9f25c14f0f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

7036cab8a17887dba5447a9f25c14f0f_JaffaCakes118
Size

274KB
MD5

7036cab8a17887dba5447a9f25c14f0f
SHA1

3850b0b9225d6c03c1ea7d3a4b430ff305df90d3
SHA256

51e5a2080391b8d76ac7ece30769d1f8be66ed5d9ec2480121ebc6bccbe0e5a0
SHA512

226c5ea30f6fe2ca9b8e49427241f0bc6d906feb4023ac86e9f1d71ad1dc6b372ab1c41d14fbe7d2f9bc2c86cbb80aabfb43d0146f85da0193c862ce08f736ac
SSDEEP

6144:4dNauEWlzPWzCWBW5V9obi9OD5fr6/1gGHdfa6:mNDEBzCW8yiofr9GBa6

Score

1^/10

Malware Config

Signatures

Files

7036cab8a17887dba5447a9f25c14f0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ed543809f2bc57668d56b4ce3b82166a

Code Sign

64:4e:12:4a:eb:7d:2c:ad:41:6b:ab:6e:e2:61:d7:5e
Certificate

Issuer

CN=ADt82UxX8ndawrW

Not Before

06/04/2012, 06:24

Not After

31/12/2039, 23:59

Subject

CN=ADt82UxX8ndawrW

Extended Key Usages

ExtKeyUsageCodeSigning

55:76:9b:ec:14:19:d5:76:26:41:29:9f:e9:46:dd:91:6d:c4:ff:76
Signer

Actual PE Digest

55:76:9b:ec:14:19:d5:76:26:41:29:9f:e9:46:dd:91:6d:c4:ff:76

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetWindowsDirectoryA
lstrcatA
CreateFileA

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l7
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l6
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed543809f2bc57668d56b4ce3b82166a

Code Sign

64:4e:12:4a:eb:7d:2c:ad:41:6b:ab:6e:e2:61:d7:5eCertificate

Extended Key Usages

55:76:9b:ec:14:19:d5:76:26:41:29:9f:e9:46:dd:91:6d:c4:ff:76Signer

Headers

File Characteristics

Imports

kernel32

msvcrt

advapi32

Sections

.text Size: 264KB - Virtual size: 264KB

.data Size: 1024B - Virtual size: 884B

.l7 Size: 1024B - Virtual size: 1000B

.l6 Size: 1024B - Virtual size: 1000B

.l5 Size: 1024B - Virtual size: 1000B

.l4 Size: 1024B - Virtual size: 1000B

.l3 Size: 1024B - Virtual size: 1000B

.l2 Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 88B

64:4e:12:4a:eb:7d:2c:ad:41:6b:ab:6e:e2:61:d7:5e
Certificate

55:76:9b:ec:14:19:d5:76:26:41:29:9f:e9:46:dd:91:6d:c4:ff:76
Signer

.text
Size: 264KB - Virtual size: 264KB

.data
Size: 1024B - Virtual size: 884B

.l7
Size: 1024B - Virtual size: 1000B

.l6
Size: 1024B - Virtual size: 1000B

.l5
Size: 1024B - Virtual size: 1000B

.l4
Size: 1024B - Virtual size: 1000B

.l3
Size: 1024B - Virtual size: 1000B

.l2
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 88B