8677ab12606d63f2092362777f42994e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8677ab12606d63f2092362777f42994e_JaffaCakes118
Size

349KB
MD5

8677ab12606d63f2092362777f42994e
SHA1

ae78953acc4751790cf38d0c3e479fb2a5582aff
SHA256

b8a3efb01d29aee7755f000210e1f27bd5bd7dcacc0bf61a9ded3dd8187a78ca
SHA512

c45a2d2957e51741c1ab5c6b981e5e3dda5031f9af1e5d5b014450d32fda5896284499dce7f588f008c561841599ffcdf484ca2c0c572da7e253d66af40221d2
SSDEEP

6144:Tf9fkP4UyhH8sn6W1zxfz/5qSzHnQIdxXhWD8QqNhuAY+:UtUfr5qSzHLxXsUud+

Score

1^/10

Malware Config

Signatures

Files

8677ab12606d63f2092362777f42994e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2509437a7f65d9c04e32ff807071969c

Code Sign

26:d2:71:1a:07:68:12:a1:4d:85:c3:cd:13:9d:d6:a6
Certificate

Issuer

CN=8fB1

Not Before

18/06/2012, 12:48

Not After

31/12/2039, 23:59

Subject

CN=8fB1

Extended Key Usages

ExtKeyUsageCodeSigning

e0:9e:b3:b1:96:a8:4f:de:63:6d:6c:77:1e:6e:c0:75:a8:c6:76:32
Signer

Actual PE Digest

e0:9e:b3:b1:96:a8:4f:de:63:6d:6c:77:1e:6e:c0:75:a8:c6:76:32

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
LoadLibraryA
GetProcAddress
CloseHandle
GetWindowsDirectoryW
GetModuleHandleA
lstrcatW
CreateFileW
VirtualAllocEx

user32

LoadIconA
LoadCursorA

advapi32

RegCloseKey

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data11
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data10
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data9
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data8
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data7
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data6
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2509437a7f65d9c04e32ff807071969c

Code Sign

26:d2:71:1a:07:68:12:a1:4d:85:c3:cd:13:9d:d6:a6Certificate

Extended Key Usages

e0:9e:b3:b1:96:a8:4f:de:63:6d:6c:77:1e:6e:c0:75:a8:c6:76:32Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 42KB - Virtual size: 41KB

.data Size: 300KB - Virtual size: 300KB

.data11 Size: 512B - Virtual size: 100B

.data10 Size: 512B - Virtual size: 100B

.data9 Size: 512B - Virtual size: 100B

.data8 Size: 512B - Virtual size: 100B

.data7 Size: 512B - Virtual size: 100B

.data6 Size: 512B - Virtual size: 100B

.data5 Size: 512B - Virtual size: 100B

.data4 Size: 512B - Virtual size: 100B

.data3 Size: 512B - Virtual size: 100B

.data2 Size: 512B - Virtual size: 100B

.reloc Size: 512B - Virtual size: 196B

26:d2:71:1a:07:68:12:a1:4d:85:c3:cd:13:9d:d6:a6
Certificate

e0:9e:b3:b1:96:a8:4f:de:63:6d:6c:77:1e:6e:c0:75:a8:c6:76:32
Signer

.text
Size: 42KB - Virtual size: 41KB

.data
Size: 300KB - Virtual size: 300KB

.data11
Size: 512B - Virtual size: 100B

.data10
Size: 512B - Virtual size: 100B

.data9
Size: 512B - Virtual size: 100B

.data8
Size: 512B - Virtual size: 100B

.data7
Size: 512B - Virtual size: 100B

.data6
Size: 512B - Virtual size: 100B

.data5
Size: 512B - Virtual size: 100B

.data4
Size: 512B - Virtual size: 100B

.data3
Size: 512B - Virtual size: 100B

.data2
Size: 512B - Virtual size: 100B

.reloc
Size: 512B - Virtual size: 196B