784693fdb660f8e783d66d24acb61ee5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

784693fdb660f8e783d66d24acb61ee5_JaffaCakes118
Size

272KB
MD5

784693fdb660f8e783d66d24acb61ee5
SHA1

ac5410b8b2ab01a688b73321df7269dfcf20156f
SHA256

073d43d5b0936294e3de4c5d33a2829b2719bdbe366211810e732019f2addbc2
SHA512

c45afc371493b501df9c254c7a478457137cdc3f1e64d85a639a79ad07350780723b38a01c4560ce1d34c6d8224b146f7a62c863ed0e9ee42bf88a85f1d1cfee
SSDEEP

6144:kenUwvAkkdT9k9V1Fm7AxQcOmXxSumZBF9md934mZqC7sxKf9/0Jd3/9sg:PUwvAf9k9VSkxQ0XxcvFsXIW7cKfKL3y

Score

1^/10

Malware Config

Signatures

Files

784693fdb660f8e783d66d24acb61ee5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b033a3aedebc6fb3ce97e0dc10fae54

Code Sign

5f:e1:1f:c5:d2:69:09:b3:4d:22:0f:e7:08:48:22:a2
Certificate

Issuer

CN=Ru3Ue4SyIDSA

Not Before

09/03/2012, 06:39

Not After

31/12/2039, 23:59

Subject

CN=Ru3Ue4SyIDSA

Extended Key Usages

ExtKeyUsageCodeSigning

c3:63:21:37:7f:2d:f2:56:38:65:a9:bd:cf:67:46:a1:7d:44:eb:6c
Signer

Actual PE Digest

c3:63:21:37:7f:2d:f2:56:38:65:a9:bd:cf:67:46:a1:7d:44:eb:6c

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateFileA
GetWindowsDirectoryA
lstrlenA
lstrcpyA

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textQ1
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textQ2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textQ3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textQ4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b033a3aedebc6fb3ce97e0dc10fae54

Code Sign

5f:e1:1f:c5:d2:69:09:b3:4d:22:0f:e7:08:48:22:a2Certificate

Extended Key Usages

c3:63:21:37:7f:2d:f2:56:38:65:a9:bd:cf:67:46:a1:7d:44:eb:6cSigner

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 2KB - Virtual size: 1KB

.textQ1 Size: 256KB - Virtual size: 256KB

.textQ2 Size: 512B - Virtual size: 100B

.textQ3 Size: 512B - Virtual size: 100B

.textQ4 Size: 512B - Virtual size: 100B

.data Size: 512B - Virtual size: 444B

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 512B - Virtual size: 112B

5f:e1:1f:c5:d2:69:09:b3:4d:22:0f:e7:08:48:22:a2
Certificate

c3:63:21:37:7f:2d:f2:56:38:65:a9:bd:cf:67:46:a1:7d:44:eb:6c
Signer

.text
Size: 2KB - Virtual size: 1KB

.textQ1
Size: 256KB - Virtual size: 256KB

.textQ2
Size: 512B - Virtual size: 100B

.textQ3
Size: 512B - Virtual size: 100B

.textQ4
Size: 512B - Virtual size: 100B

.data
Size: 512B - Virtual size: 444B

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 512B - Virtual size: 112B