8d61230227a0e34532e0a71337245f66_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8d61230227a0e34532e0a71337245f66_JaffaCakes118
Size

306KB
MD5

8d61230227a0e34532e0a71337245f66
SHA1

4d364bc359710928160878b41972d85af7805e6d
SHA256

ef19f219097595fefcb35b06ff18158eceb3e2f2700cf47a919ce38c475f18ce
SHA512

7c0feff0040955e495aabb3ee392d1dcb820f40ede95936d492515d54c9dc957c44f90da513c31f8adfe3e0ddf1860430940ad8967f8784fa6ebd21d3026dcca
SSDEEP

6144:xuuqqyWT/REBJTVkIS0266onJQ+XdV6Z1giLYtxVfN+:xWBJTVE6FJQ+dV6Z5sZI

Score

1^/10

Malware Config

Signatures

Files

8d61230227a0e34532e0a71337245f66_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8cf3b7ce01b791efff2ae0b1e0ebd7f3

Code Sign

01
Certificate

Issuer

O=VAVAVAV,L=GAFAF,ST=GFFA,C=TQ

Not Before

17/04/2014, 00:39

Not After

16/04/2016, 00:39

Subject

CN=SO LOVE,OU=IN MY HEART MY LOVE,O=FORVER YOURS,L=ILOVEYOU,ST=ASD,C=LL

81:d6:e3:70:db:44:ad:b0:e9:74:f5:9e:e4:13:e1:d3:08:d4:71:c7
Signer

Actual PE Digest

81:d6:e3:70:db:44:ad:b0:e9:74:f5:9e:e4:13:e1:d3:08:d4:71:c7

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
GetLastError
ReadFile
GetProcAddress
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
SetUnhandledExceptionFilter
CloseHandle
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetFilePointer
FlushFileBuffers
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
IsBadReadPtr
IsBadCodePtr
SetStdHandle
LoadLibraryA
GetStringTypeA
GetStringTypeW
LCMapStringA

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 214KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

IBEJUVUA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8cf3b7ce01b791efff2ae0b1e0ebd7f3

Code Sign

01Certificate

81:d6:e3:70:db:44:ad:b0:e9:74:f5:9e:e4:13:e1:d3:08:d4:71:c7Signer

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 56KB - Virtual size: 54KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 214KB - Virtual size: 215KB

IBEJUVUA Size: 4KB - Virtual size: 3KB

01
Certificate

81:d6:e3:70:db:44:ad:b0:e9:74:f5:9e:e4:13:e1:d3:08:d4:71:c7
Signer

.text
Size: 56KB - Virtual size: 54KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 214KB - Virtual size: 215KB

IBEJUVUA
Size: 4KB - Virtual size: 3KB