7580de5edbe07ae539d7021b092d2b29_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

7580de5edbe07ae539d7021b092d2b29_JaffaCakes118
Size

262KB
MD5

7580de5edbe07ae539d7021b092d2b29
SHA1

d3839b47e35cc6c14872b164d71d137ef9211f70
SHA256

589102099622ea5e39289aee3819242650a5b5f418eb6827c4c60201a09161e2
SHA512

1b1555631e3f9510d0d1fdf2cabeee33b5408ee738358c3f2bceafd4c02b201d8ac00f21004eab8d56cc39ed4c9be7984e68df66187810dca6382fee8011f15e
SSDEEP

6144:HU8Gp+df0afmVTRMdOdpn94sLrNXel9jb98+MAkC:08YkfXf4TRMS94svNuzjb9ZD

Score

1^/10

Malware Config

Signatures

Files

7580de5edbe07ae539d7021b092d2b29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51faaa25dc23f004def8c4c23e21714d

Code Sign

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77
Certificate

Issuer

CN=ggggggggg

Not Before

17-01-2012 12:30

Not After

31-12-2039 23:59

Subject

CN=ggggggggg

Extended Key Usages

ExtKeyUsageCodeSigning

f7:f5:b1:9f:ba:a0:5b:1d:b5:b9:b3:51:6d:89:5a:3a:1c:4e:f3:95
Signer

Actual PE Digest

f7:f5:b1:9f:ba:a0:5b:1d:b5:b9:b3:51:6d:89:5a:3a:1c:4e:f3:95

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
GetModuleHandleA
GetProcAddress
lstrcmpi
FlushConsoleInputBuffer
lstrcpynW
WritePrivateProfileSectionW
GlobalSize
GetProcessTimes
GetCPInfoExW
GetConsoleDisplayMode
SetConsoleCursorInfo
GetNumberFormatA
ReadFileEx

user32

LoadIconA

advapi32

RegOpenKeyExW

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51faaa25dc23f004def8c4c23e21714d

Code Sign

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77Certificate

Extended Key Usages

f7:f5:b1:9f:ba:a0:5b:1d:b5:b9:b3:51:6d:89:5a:3a:1c:4e:f3:95Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 256KB - Virtual size: 255KB

.text3 Size: 512B - Virtual size: 512B

.data Size: 1024B - Virtual size: 828B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 308B

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77
Certificate

f7:f5:b1:9f:ba:a0:5b:1d:b5:b9:b3:51:6d:89:5a:3a:1c:4e:f3:95
Signer

.text
Size: 256KB - Virtual size: 255KB

.text3
Size: 512B - Virtual size: 512B

.data
Size: 1024B - Virtual size: 828B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 308B