75d4b10e18198486fb504eccc5c74bd9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

75d4b10e18198486fb504eccc5c74bd9_JaffaCakes118
Size

315KB
MD5

75d4b10e18198486fb504eccc5c74bd9
SHA1

7c7e5a0273423a107c569ebe122dc690c33d087f
SHA256

37739ad6d0de7ac1b621cb71ee6addabb75b66e230018f6222397579bc17cbcb
SHA512

7a4e5e68b8c97f79b8d8b9dbaa9a49e9ad5b7b3f70360d1ad60ff240cf4f0a52a325f361bed895a1a9136b7f8db3aa0c6da937359280ed343e1889603d6ae6b3
SSDEEP

6144:rDIcTSnzQPSqzXXpydn3nozW5TFYkI4uLZMGLv+xxxxxxxxxxxxxxxxngxxxxxxj:HxTSzQPRHYdn34y3IbnLGxxxxxxxxxxK

Score

1^/10

Malware Config

Signatures

Files

75d4b10e18198486fb504eccc5c74bd9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d5c789d4e602030ee7b0f0ab6b74258f

Code Sign

01:64:9b:a0:74:6d:08:53:b3:3d:20:74:9e:05:b0:30
Certificate

Issuer

CN=CrZvMFNeGbO2FBAdLGSwKOYytbbzrF

Not Before

02/05/2012, 06:07

Not After

31/12/2039, 23:59

Subject

CN=CrZvMFNeGbO2FBAdLGSwKOYytbbzrF

Extended Key Usages

ExtKeyUsageCodeSigning

c9:a8:97:ce:6e:e1:84:35:7d:b0:b9:6d:7e:57:db:bd:1b:41:8f:a5
Signer

Actual PE Digest

c9:a8:97:ce:6e:e1:84:35:7d:b0:b9:6d:7e:57:db:bd:1b:41:8f:a5

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
GetWindowsDirectoryW
lstrcatW
CreateFileW

user32

InvalidateRect
GetDC
ReleaseDC
BeginPaint
LoadCursorA
SetCursor
ShowCursor
EndPaint
PostQuitMessage
DefWindowProcA

gdi32

SetPixel
LineTo

advapi32

RegOpenKeyA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.z2
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.z3
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.z
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5c789d4e602030ee7b0f0ab6b74258f

Code Sign

01:64:9b:a0:74:6d:08:53:b3:3d:20:74:9e:05:b0:30Certificate

Extended Key Usages

c9:a8:97:ce:6e:e1:84:35:7d:b0:b9:6d:7e:57:db:bd:1b:41:8f:a5Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 2KB - Virtual size: 2KB

.z2 Size: 512B - Virtual size: 4B

.data Size: 1024B - Virtual size: 996B

.z3 Size: 512B - Virtual size: 4B

.z Size: 307KB - Virtual size: 307KB

.rsrc Size: 1024B - Virtual size: 968B

.reloc Size: 512B - Virtual size: 168B

01:64:9b:a0:74:6d:08:53:b3:3d:20:74:9e:05:b0:30
Certificate

c9:a8:97:ce:6e:e1:84:35:7d:b0:b9:6d:7e:57:db:bd:1b:41:8f:a5
Signer

.text
Size: 2KB - Virtual size: 2KB

.z2
Size: 512B - Virtual size: 4B

.data
Size: 1024B - Virtual size: 996B

.z3
Size: 512B - Virtual size: 4B

.z
Size: 307KB - Virtual size: 307KB

.rsrc
Size: 1024B - Virtual size: 968B

.reloc
Size: 512B - Virtual size: 168B