93b14f3093320493bae2e3a0736b929f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

93b14f3093320493bae2e3a0736b929f_JaffaCakes118
Size

305KB
MD5

93b14f3093320493bae2e3a0736b929f
SHA1

810b6f3148e43050e2baa14f658edae646992caf
SHA256

285a2be4cea8fa3664c95ad570ac8b4ebc1ec9237c6f939015520ba332827ddb
SHA512

18af74ebaaeb43585148f0061005ab804fecce72730b8728044502a3e22e311966dc649ed8929671b2fea43810c6e4e22a63ef7b8753035e546eb0ef384affeb
SSDEEP

6144:EoCntXEPZtH+muJCR9pWXnvAgtMXdXI+RVFPkpFpduFkBGlU6pLrG:MLt0PpWogt5+xPLk+UQLrG

Score

1^/10

Malware Config

Signatures

Files

93b14f3093320493bae2e3a0736b929f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d1780708e3e4dbea1d37868391bc19b2

Code Sign

35:30:c9:e4:58:69:3f:58:b4:b1:5c:b1:73:c4:58:2c
Certificate

Issuer

CN=Root Agency

Not Before

02/11/2011, 14:43

Not After

11/11/2026, 22:00

Subject

CN=Joe's-Software-Emporium

Extended Key Usages

ExtKeyUsageCodeSigning

01:7d:3f:ad:b3:25:43:d4:d0:35:21:63:ed:8e:e1:04:8a:f9:12:c3
Signer

Actual PE Digest

01:7d:3f:ad:b3:25:43:d4:d0:35:21:63:ed:8e:e1:04:8a:f9:12:c3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glIndexd
glDrawPixels
glColor4f
glMapGrid2d
glEvalPoint1
glClipPlane
glRasterPos4i
glIsList
glVertex3i
glRasterPos2sv
glRasterPos2i
glNormal3fv
glGetLightiv

glu32

gluPwlCurve
gluEndCurve
gluDeleteTess
gluLoadSamplingMatrices
gluErrorUnicodeStringEXT
gluTessVertex
gluBuild1DMipmaps
gluLookAt
gluProject

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

kernel32

WaitForMultipleObjects
GetLocaleInfoA
EnterCriticalSection
LeaveCriticalSection
VirtualAllocEx
VirtualAlloc
ExitProcess
GetModuleHandleA
GetProcAddress
GetStartupInfoA
SetThreadLocale

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 266KB - Virtual size: 693KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1780708e3e4dbea1d37868391bc19b2

Code Sign

35:30:c9:e4:58:69:3f:58:b4:b1:5c:b1:73:c4:58:2cCertificate

Extended Key Usages

01:7d:3f:ad:b3:25:43:d4:d0:35:21:63:ed:8e:e1:04:8a:f9:12:c3Signer

Headers

File Characteristics

Imports

opengl32

glu32

msvcrt

kernel32

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 266KB - Virtual size: 693KB

.rsrc Size: 16KB - Virtual size: 15KB

35:30:c9:e4:58:69:3f:58:b4:b1:5c:b1:73:c4:58:2c
Certificate

01:7d:3f:ad:b3:25:43:d4:d0:35:21:63:ed:8e:e1:04:8a:f9:12:c3
Signer

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 266KB - Virtual size: 693KB

.rsrc
Size: 16KB - Virtual size: 15KB