a6002db4dec1aaca8996c4d2e1dfc580_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a6002db4dec1aaca8996c4d2e1dfc580_JaffaCakes118
Size

331KB
MD5

a6002db4dec1aaca8996c4d2e1dfc580
SHA1

62a3dff42880e8678e891f118ad1f2adb94d8a68
SHA256

73b5eedfff8170974109de5de80fd98e3aaa23b9bd90d77d272792f7fd77fd98
SHA512

8d7d11e4bb29015d8d7a458f08c511c1dd20b32379d64474e725761548662ff49da27d05a142f2041aa4af61bb09da6b4146245a52e03d5ea977da3782f69ea5
SSDEEP

6144:JDXt+rW/HLHjIK7kFNCsSqp1Gs2VSHO5ntbyY23xVAGzuLoxSj3p:JDqwrsK7kFZSqp11u5tbyY0ULoUF

Score

1^/10

Malware Config

Signatures

Files

a6002db4dec1aaca8996c4d2e1dfc580_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c2e1cae882d39aad76257371d0930826

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

09/04/1996, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

1c:b4:79:b6:79:06:a8:e2:78:3c:92:03:c2:98:2e:4e
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

27/06/1999, 00:00

Not After

26/06/2000, 23:59

Subject

CN=Midland Bank PLC,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=First Direct,O=VeriSign\, Inc.,L=Internet+L=London,ST=London,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
LoadLibraryA
GetModuleHandleA
GlobalFree
GlobalUnlock
VirtualAlloc
CloseHandle
ReadFile
GlobalLock
GlobalAlloc
GetFileSize
CreateFileA
GetModuleFileNameA
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zexe
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2e1cae882d39aad76257371d0930826

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10Certificate

1c:b4:79:b6:79:06:a8:e2:78:3c:92:03:c2:98:2e:4eCertificate

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 3KB

.zexe Size: 100KB - Virtual size: 99KB

.rsrc Size: 200KB - Virtual size: 198KB

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

1c:b4:79:b6:79:06:a8:e2:78:3c:92:03:c2:98:2e:4e
Certificate

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 3KB

.zexe
Size: 100KB - Virtual size: 99KB

.rsrc
Size: 200KB - Virtual size: 198KB