a5b7e1bd0b0a08db68ee4fc79e5c34d4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a5b7e1bd0b0a08db68ee4fc79e5c34d4_JaffaCakes118
Size

321KB
MD5

a5b7e1bd0b0a08db68ee4fc79e5c34d4
SHA1

3afdcf520ba1efa1d9b41a143c18219544a87e62
SHA256

7fdb9b8a79a164241bc2fb65dd27c04763c53a1ed42bca9d86a2be2930556d13
SHA512

9a517114e674732554433ac19f71d1715e1c243a889cb1eaf23f334e657fbceabbb6f3e314d9982ba4e87f7b6f40bcd95fca2a6899c4db1e00321544086851cf
SSDEEP

6144:ST+FQoTd73swMHScIOq1G/PVRnC2CkErfoG:FFhTEycBqwVRC2gcG

Score

1^/10

Malware Config

Signatures

Files

a5b7e1bd0b0a08db68ee4fc79e5c34d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09856ea049ee0244c3e890c703547110

Code Sign

13:a7:f4:23:87:fb:13:64:bb:28:28:26:52:ba:b1:bf
Certificate

Issuer

CN=341235221341228966292465999492447398695844727979223929433914174169461853293559324913756452688926312923675437232614221361649636752161156752413489436552

Not Before

13/07/2012, 07:49

Not After

31/12/2039, 23:59

Subject

CN=341235221341228966292465999492447398695844727979223929433914174169461853293559324913756452688926312923675437232614221361649636752161156752413489436552

Extended Key Usages

ExtKeyUsageCodeSigning

ee:13:03:0f:4c:f3:76:15:55:27:6c:cd:15:6e:a8:26:42:a3:c0:c4
Signer

Actual PE Digest

ee:13:03:0f:4c:f3:76:15:55:27:6c:cd:15:6e:a8:26:42:a3:c0:c4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetWindowsDirectoryW
lstrcatW
CreateFileW
VirtualAllocEx
GetModuleHandleA
GetProcAddress

user32

LoadIconA

advapi32

RegOpenKeyW
RegCloseKey

Sections

.text
Size: 273KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data6
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09856ea049ee0244c3e890c703547110

Code Sign

13:a7:f4:23:87:fb:13:64:bb:28:28:26:52:ba:b1:bfCertificate

Extended Key Usages

ee:13:03:0f:4c:f3:76:15:55:27:6c:cd:15:6e:a8:26:42:a3:c0:c4Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 273KB - Virtual size: 272KB

.data Size: 40KB - Virtual size: 40KB

.data6 Size: 1024B - Virtual size: 1000B

.data5 Size: 1024B - Virtual size: 1000B

.data4 Size: 1024B - Virtual size: 1000B

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 220B

13:a7:f4:23:87:fb:13:64:bb:28:28:26:52:ba:b1:bf
Certificate

ee:13:03:0f:4c:f3:76:15:55:27:6c:cd:15:6e:a8:26:42:a3:c0:c4
Signer

.text
Size: 273KB - Virtual size: 272KB

.data
Size: 40KB - Virtual size: 40KB

.data6
Size: 1024B - Virtual size: 1000B

.data5
Size: 1024B - Virtual size: 1000B

.data4
Size: 1024B - Virtual size: 1000B

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 220B