a565a72e1a73e3c9653c8db811cc0db2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a565a72e1a73e3c9653c8db811cc0db2_JaffaCakes118
Size

310KB
MD5

a565a72e1a73e3c9653c8db811cc0db2
SHA1

456602428f0bee8a96b9192c49298928bb0a01b5
SHA256

5ceae90f8859054d1af21b0a1a6729a6da462f227d1dfe4f39341bb9d4902bfc
SHA512

cf418e969e4671d88035131989bbee8c5f4ec53ab4a41d62d62da5757bc8e317236880de378ca28cbe65de88b5fe113295c35438a6bdf8ad8acfe3d8d885a3a9
SSDEEP

6144:rwTTujg4DQC6ziRo0sYXkgDm5TsCQIaNEN4xxgBDixuqFsE6ar:sMpF6K1drUIIaNniBDnq+nar

Score

1^/10

Malware Config

Signatures

Files

a565a72e1a73e3c9653c8db811cc0db2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

990e1e166daa6313ddd8764b5bbaa95c

Code Sign

51:64:c3:9c:dc:c6:fc:95:42:d7:cd:5c:bf:8d:64:ee
Certificate

Issuer

CN=23612

Not Before

03/02/2012, 15:38

Not After

31/12/2039, 23:59

Subject

CN=23612

Extended Key Usages

ExtKeyUsageCodeSigning

1e:99:48:c8:cd:08:c7:fc:64:37:70:fd:4c:a5:d5:24:37:98:7d:74
Signer

Actual PE Digest

1e:99:48:c8:cd:08:c7:fc:64:37:70:fd:4c:a5:d5:24:37:98:7d:74

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
VirtualAlloc

user32

LoadIconW

advapi32

RegOpenKeyExW

shlwapi

SHRegEnumUSValueA
PathMakeSystemFolderA
PathSetDlgItemPathA
SHRegGetBoolUSValueW
SHRegSetUSValueW
SHRegWriteUSValueA
PathAddExtensionA
ord16

Sections

.text
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text5
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

990e1e166daa6313ddd8764b5bbaa95c

Code Sign

51:64:c3:9c:dc:c6:fc:95:42:d7:cd:5c:bf:8d:64:eeCertificate

Extended Key Usages

1e:99:48:c8:cd:08:c7:fc:64:37:70:fd:4c:a5:d5:24:37:98:7d:74Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

Sections

.text Size: 303KB - Virtual size: 302KB

.data Size: 1024B - Virtual size: 640B

.text5 Size: 512B - Virtual size: 32B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 164B

51:64:c3:9c:dc:c6:fc:95:42:d7:cd:5c:bf:8d:64:ee
Certificate

1e:99:48:c8:cd:08:c7:fc:64:37:70:fd:4c:a5:d5:24:37:98:7d:74
Signer

.text
Size: 303KB - Virtual size: 302KB

.data
Size: 1024B - Virtual size: 640B

.text5
Size: 512B - Virtual size: 32B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 164B