78793089111ea3a32d5d6a4db7eb932d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

78793089111ea3a32d5d6a4db7eb932d_JaffaCakes118
Size

109KB
MD5

78793089111ea3a32d5d6a4db7eb932d
SHA1

ad0daf74ab5cb8996366949b81d679a110f0cd91
SHA256

12ebe517e993ce3cdaaa27a19f059c9960cb9341d6807bebef5cd8020071aa50
SHA512

d5d10d3261ad0ca68b912bf417d5efedf60a3ea17c7880d9d913b60f24f9d678e7e099a1b86b1a9b95a800b4a82e1e7665c842738126ffdeeee0bc315c0596c3
SSDEEP

1536:4XHU8UVjsEvX2Yaudq6Z+/ScsjKMCaf4xs8AEzCozpTBVPsU12o0K5d9DKREGfzZ:k2sEvGjudq6w/SwxhA2ColQen0gKWGL

Score

1^/10

Malware Config

Signatures

Files

78793089111ea3a32d5d6a4db7eb932d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

f6f879dd42a899bbb009b5a307c79f8e

Code Sign

0a:c2:ec:72:b0:75:d4:50:b0:1c:c6:52:3b:30:10:01
Certificate

Issuer

CN=Protected Storage Driver

Not Before

31/12/2008, 16:00

Not After

31/12/2014, 16:00

Subject

CN=Protected Storage Driver

Extended Key Usages

ExtKeyUsageCodeSigning

1b:e2:61:b1:ab:19:bf:05:c7:69:56:44:01:86:c5:d8:39:83:48:c4
Signer

Actual PE Digest

1b:e2:61:b1:ab:19:bf:05:c7:69:56:44:01:86:c5:d8:39:83:48:c4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetCurrentThreadId
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

GetKeyboardType
MessageBoxA

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

Sections

*
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

<
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

)
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

<
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

%
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

)
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f6f879dd42a899bbb009b5a307c79f8e

Code Sign

0a:c2:ec:72:b0:75:d4:50:b0:1c:c6:52:3b:30:10:01Certificate

Extended Key Usages

1b:e2:61:b1:ab:19:bf:05:c7:69:56:44:01:86:c5:d8:39:83:48:c4Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

Sections

* Size: - Virtual size: 104KB

9 Size: - Virtual size: 2KB

< Size: - Virtual size: 3KB

5 Size: - Virtual size: 2KB

) Size: - Virtual size: 12B

Size: 512B - Virtual size: 24B

0 Size: - Virtual size: 9KB

1 Size: 3KB - Virtual size: 6KB

< Size: - Virtual size: 16KB

% Size: 103KB - Virtual size: 103KB

) Size: 512B - Virtual size: 160B

0a:c2:ec:72:b0:75:d4:50:b0:1c:c6:52:3b:30:10:01
Certificate

1b:e2:61:b1:ab:19:bf:05:c7:69:56:44:01:86:c5:d8:39:83:48:c4
Signer

*
Size: - Virtual size: 104KB

9
Size: - Virtual size: 2KB

<
Size: - Virtual size: 3KB

5
Size: - Virtual size: 2KB

)
Size: - Virtual size: 12B

0
Size: - Virtual size: 9KB

1
Size: 3KB - Virtual size: 6KB

<
Size: - Virtual size: 16KB

%
Size: 103KB - Virtual size: 103KB

)
Size: 512B - Virtual size: 160B