84d534c81786e6d2354e5ac4ba669f38_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

84d534c81786e6d2354e5ac4ba669f38_JaffaCakes118
Size

197KB
MD5

84d534c81786e6d2354e5ac4ba669f38
SHA1

9d6af9e69d15763326d1380d5677fd099585367c
SHA256

2f8f749926af49ad084223ed25401ee300ba6971f4a60bfcaeda387589d6cf48
SHA512

299333e893f86635a587f52d4c1fe2f3b8e0ae0b2456e0b5afb9cf682bea36475ca8a5539783dd94876570878da2e03d7b7aeff2a3b2fab1a015608daac70e25
SSDEEP

3072:pCBiBJmllxVecHf5KFHFkkgPJK6mpoEHRO2rVF20BH1TWZacBiu4tw4Sj16:kBifOFHfoF+PP2zxOUTx1CzYu4K4q6

Score

1^/10

Malware Config

Signatures

Files

84d534c81786e6d2354e5ac4ba669f38_JaffaCakes118
.zip
Prijs.Pdf_______________________________________________________________.exe
.exe windows:4 windows x86 arch:x86

d95b96ccdf30544137ad89a78e09a3eb

Code Sign

4f:20:58:14:5f:55:8f:b9:4e:2b:23:7b:f1:d9:51:c7
Certificate

Issuer

CN=dsfbyhebrt

Not Before

29/02/2012, 09:29

Not After

31/12/2039, 23:59

Subject

CN=dsfbyhebrt

Extended Key Usages

ExtKeyUsageCodeSigning

4f:93:6d:58:ee:23:7f:68:ac:d9:8d:13:95:d3:6c:91:95:ab:a3:f8
Signer

Actual PE Digest

4f:93:6d:58:ee:23:7f:68:ac:d9:8d:13:95:d3:6c:91:95:ab:a3:f8

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
VirtualAlloc
InterlockedCompareExchange
AddAtomA

advapi32

RegOpenKeyA

shlwapi

PathUnmakeSystemFolderW
SHRegQueryUSValueA
PathCompactPathA
ColorRGBToHLS
PathFindSuffixArrayW
SHSetValueW
UrlIsNoHistoryA
StrCmpNA
StrTrimA
PathSkipRootA
PathIsURLA
StrCmpNIA
PathIsLFNFileSpecW
PathIsUNCServerShareW
PathFileExistsA
PathIsPrefixA
PathRemoveArgsA
PathFindNextComponentA
SHRegCreateUSKeyA
StrCatBuffA
IntlStrEqWorkerW
SHCopyKeyA
PathCombineA
SHQueryInfoKeyA
UrlEscapeA
SHQueryInfoKeyW
UrlGetPartW
SHRegDeleteUSValueW
SHCreateStreamOnFileW
StrRetToStrW
StrFormatKBSizeA
PathIsUNCServerA
PathCanonicalizeW
SHDeleteEmptyKeyA
SHDeleteKeyA
PathSetDlgItemPathA
SHRegEnumUSKeyW
SHOpenRegStreamA
SHRegQueryInfoUSKeyA
PathRemoveBackslashW
PathMakeSystemFolderW
PathGetDriveNumberW
SHCopyKeyW
UrlIsNoHistoryW
UrlCreateFromPathW
UrlGetLocationW
StrRChrA
PathBuildRootA
PathCanonicalizeA
StrChrW
PathIsUNCA
StrPBrkA
UrlCompareW
UrlCreateFromPathA
StrCatW
PathGetCharTypeW
UrlIsW
PathMakePrettyA
StrCmpW
PathRelativePathToW
SHRegWriteUSValueW
PathIsDirectoryEmptyA
PathCompactPathExA
PathIsDirectoryA
UrlCombineA
PathCommonPrefixA
PathRemoveBlanksW
PathIsRootW
StrIsIntlEqualA
SHRegGetBoolUSValueW
PathIsRelativeA
PathFindFileNameW
PathIsNetworkPathW
PathSetDlgItemPathW
StrChrIA
SHQueryValueExW
SHAutoComplete
PathRemoveBackslashA
SHRegCloseUSKey
UrlEscapeW
PathGetArgsA
StrRStrIW
StrToIntExW
SHStrDupA
SHRegSetPathA
PathIsDirectoryEmptyW
SHRegGetPathW
SHGetValueW
StrCatBuffW
AssocCreate

Sections

.textFF4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textFF3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d95b96ccdf30544137ad89a78e09a3eb

Code Sign

4f:20:58:14:5f:55:8f:b9:4e:2b:23:7b:f1:d9:51:c7Certificate

Extended Key Usages

4f:93:6d:58:ee:23:7f:68:ac:d9:8d:13:95:d3:6c:91:95:ab:a3:f8Signer

Headers

File Characteristics

Imports

kernel32

advapi32

shlwapi

Sections

.textFF4 Size: 1024B - Virtual size: 1000B

.textFF3 Size: 1024B - Virtual size: 1000B

.text Size: 213KB - Virtual size: 212KB

.data Size: 3KB - Virtual size: 2KB

.rsrc Size: 13KB - Virtual size: 12KB

.reloc Size: 1024B - Virtual size: 576B

4f:20:58:14:5f:55:8f:b9:4e:2b:23:7b:f1:d9:51:c7
Certificate

4f:93:6d:58:ee:23:7f:68:ac:d9:8d:13:95:d3:6c:91:95:ab:a3:f8
Signer

.textFF4
Size: 1024B - Virtual size: 1000B

.textFF3
Size: 1024B - Virtual size: 1000B

.text
Size: 213KB - Virtual size: 212KB

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 13KB - Virtual size: 12KB

.reloc
Size: 1024B - Virtual size: 576B