8580a81d5c06716b04c5d22cbb8b7291_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8580a81d5c06716b04c5d22cbb8b7291_JaffaCakes118
Size

269KB
MD5

8580a81d5c06716b04c5d22cbb8b7291
SHA1

1586545c40592a37ad69f10544a01a723938e9e5
SHA256

51d7a02e5b4d7dedb32787e5b978d908d72a667b35f51699840b242a11b0ea5b
SHA512

c3d68797abee62e22b9a3e903a5bb2b40aa9c3cf92b3dbe47aac2c4cbc7af616da9e729dee43150d1b6d88197814afa931c104fec6e3a49af2c990e2125667d2
SSDEEP

6144:YSAarouH67h92+bv9HL96f9N0omr2lz2y2FJXXT3Qz:YSAaroHL2+blHLQf9lmr2ld2rT

Score

1^/10

Malware Config

Signatures

Files

8580a81d5c06716b04c5d22cbb8b7291_JaffaCakes118
.exe windows:4 windows x86 arch:x86

283fc56c49791318f8fcecf3b3d37772

Code Sign

5f:e1:1f:c5:d2:69:09:b3:4d:22:0f:e7:08:48:22:a2
Certificate

Issuer

CN=Ru3Ue4SyIDSA

Not Before

09/03/2012, 06:39

Not After

31/12/2039, 23:59

Subject

CN=Ru3Ue4SyIDSA

Extended Key Usages

ExtKeyUsageCodeSigning

22:03:fa:2e:c0:e8:2c:1c:b2:61:c3:b2:1d:82:1c:64:a6:b2:57:5b
Signer

Actual PE Digest

22:03:fa:2e:c0:e8:2c:1c:b2:61:c3:b2:1d:82:1c:64:a6:b2:57:5b

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
CreateFileA
lstrlenA
lstrcpyA
VirtualAlloc

advapi32

RegOpenKeyW
RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textQ1
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textQ2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textQ3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

283fc56c49791318f8fcecf3b3d37772

Code Sign

5f:e1:1f:c5:d2:69:09:b3:4d:22:0f:e7:08:48:22:a2Certificate

Extended Key Usages

22:03:fa:2e:c0:e8:2c:1c:b2:61:c3:b2:1d:82:1c:64:a6:b2:57:5bSigner

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 2KB - Virtual size: 1KB

.textQ1 Size: 254KB - Virtual size: 253KB

.textQ2 Size: 512B - Virtual size: 100B

.textQ3 Size: 512B - Virtual size: 100B

.data Size: 512B - Virtual size: 464B

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 512B - Virtual size: 116B

5f:e1:1f:c5:d2:69:09:b3:4d:22:0f:e7:08:48:22:a2
Certificate

22:03:fa:2e:c0:e8:2c:1c:b2:61:c3:b2:1d:82:1c:64:a6:b2:57:5b
Signer

.text
Size: 2KB - Virtual size: 1KB

.textQ1
Size: 254KB - Virtual size: 253KB

.textQ2
Size: 512B - Virtual size: 100B

.textQ3
Size: 512B - Virtual size: 100B

.data
Size: 512B - Virtual size: 464B

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 512B - Virtual size: 116B