781f6104f2c39d8c9f6d60c5d63410ae_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

781f6104f2c39d8c9f6d60c5d63410ae_JaffaCakes118
Size

437KB
MD5

781f6104f2c39d8c9f6d60c5d63410ae
SHA1

a49995a3f5aff90c7fbb5bd8caa0cfca7d1e8714
SHA256

08070d32015153906e91477dd7d6df080de666055204c4094c6182ae915174ef
SHA512

0667b6fca3b7d5b8a76f109f4f74682d0c561504bf35f13c13a6c254b3254df7e3f31d672af7c828cbf352996317e5b9688e500e1c99248517e86b076b1ba32a
SSDEEP

12288:2W8oIi65tC5ErN25F+YzfCgASDv0SXVa3Q0U8/yOBzSak:2fi65YEx4MYzf7fvvXA3F3BzSak

Score

1^/10

Malware Config

Signatures

Files

781f6104f2c39d8c9f6d60c5d63410ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e360c614db75e66dd1a16351e1142ca

Code Sign

2c:4c:01:51:51:e2:3f:8c:45:40:0e:aa:97:4c:d1:88
Certificate

Issuer

CN=Root Agency

Not Before

20/12/2011, 07:14

Not After

25/03/2012, 22:00

Subject

CN=Benert

d7:27:52:8d:ff:ac:0e:a1:4a:45:b4:82:af:88:60:ae:85:db:fc:e4
Signer

Actual PE Digest

d7:27:52:8d:ff:ac:0e:a1:4a:45:b4:82:af:88:60:ae:85:db:fc:e4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetLastActivePopup
IsWindowVisible
SetForegroundWindow
CreateWindowExA
IsWindow

ole32

CoTaskMemRealloc
CoGetStandardMarshal

oleaut32

RegisterTypeLi
QueryPathOfRegTypeLi

advapi32

RegCreateKeyExA

kernel32

GetStringTypeW
GetStringTypeA
LCMapStringA
LoadLibraryA
HeapReAlloc
VirtualAlloc
LCMapStringW
FreeEnvironmentStringsA
HeapSize
EnterCriticalSection
CreateEventA
GetACP
VirtualProtectEx
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleHandleA
GetProcAddress
ExitProcess
InterlockedDecrement
InterlockedIncrement
GetStartupInfoA
GetCommandLineA
GetVersion
MultiByteToWideChar
GetCPInfo
CompareStringA
CompareStringW
InitializeCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetOEMCP

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.azs
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.atcjeg
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e360c614db75e66dd1a16351e1142ca

Code Sign

2c:4c:01:51:51:e2:3f:8c:45:40:0e:aa:97:4c:d1:88Certificate

d7:27:52:8d:ff:ac:0e:a1:4a:45:b4:82:af:88:60:ae:85:db:fc:e4Signer

Headers

File Characteristics

Imports

user32

ole32

oleaut32

advapi32

kernel32

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 6KB - Virtual size: 97KB

.azs Size: 288KB - Virtual size: 288KB

.atcjeg Size: 110KB - Virtual size: 110KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 4KB

2c:4c:01:51:51:e2:3f:8c:45:40:0e:aa:97:4c:d1:88
Certificate

d7:27:52:8d:ff:ac:0e:a1:4a:45:b4:82:af:88:60:ae:85:db:fc:e4
Signer

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 6KB - Virtual size: 97KB

.azs
Size: 288KB - Virtual size: 288KB

.atcjeg
Size: 110KB - Virtual size: 110KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 4KB