963c8fc71c5e4e0ed21d32d9b2b20fc4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

963c8fc71c5e4e0ed21d32d9b2b20fc4_JaffaCakes118
Size

244KB
MD5

963c8fc71c5e4e0ed21d32d9b2b20fc4
SHA1

eedce534faf4fb0463118b54320b1f5473c8c9c4
SHA256

7516118d6ee03e9c7c3fc84b17b85cd5b81fe343d799cbdcc3e03b785c19e89b
SHA512

e05a437242d48c59a5ede9ebec698af97a88c9e7f30318a7ef5aaa499d50e06a442733d21b1894b41b2f44561fbd5ddc4f2a120ea97f5a8bc5a174bcb3def255
SSDEEP

6144:vvOgxxd6CB4YQ01gK2wRg7BSPLUkxuVDnwjmM5gJg:vvl7H7Rid8cnwjfQg

Score

1^/10

Malware Config

Signatures

Files

963c8fc71c5e4e0ed21d32d9b2b20fc4_JaffaCakes118
.zip
Statistica.Pdf__________________________________________________________.exe
.exe windows:4 windows x86 arch:x86

990e1e166daa6313ddd8764b5bbaa95c

Code Sign

67:7b:0f:56:de:04:8d:a7:4e:a7:1f:99:23:cc:68:26
Certificate

Issuer

CN=u65ykrty

Not Before

28/01/2012, 05:39

Not After

31/12/2039, 23:59

Subject

CN=u65ykrty

Extended Key Usages

ExtKeyUsageCodeSigning

26:4b:fa:da:c6:0f:dd:ff:63:a3:00:2f:eb:ba:48:c6:ca:cb:1f:82
Signer

Actual PE Digest

26:4b:fa:da:c6:0f:dd:ff:63:a3:00:2f:eb:ba:48:c6:ca:cb:1f:82

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
VirtualAlloc

user32

LoadIconW

advapi32

RegOpenKeyExW

shlwapi

SHRegEnumUSValueA
PathMakeSystemFolderA
PathSetDlgItemPathA
SHRegGetBoolUSValueW
SHRegSetUSValueW
SHRegWriteUSValueA
PathAddExtensionA
ord16

Sections

.text
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text5
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

990e1e166daa6313ddd8764b5bbaa95c

Code Sign

67:7b:0f:56:de:04:8d:a7:4e:a7:1f:99:23:cc:68:26Certificate

Extended Key Usages

26:4b:fa:da:c6:0f:dd:ff:63:a3:00:2f:eb:ba:48:c6:ca:cb:1f:82Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

Sections

.text Size: 303KB - Virtual size: 302KB

.data Size: 1024B - Virtual size: 640B

.text5 Size: 512B - Virtual size: 32B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 164B

67:7b:0f:56:de:04:8d:a7:4e:a7:1f:99:23:cc:68:26
Certificate

26:4b:fa:da:c6:0f:dd:ff:63:a3:00:2f:eb:ba:48:c6:ca:cb:1f:82
Signer

.text
Size: 303KB - Virtual size: 302KB

.data
Size: 1024B - Virtual size: 640B

.text5
Size: 512B - Virtual size: 32B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 164B