aced1aaa80f0ce8efec4f4929283e44b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

aced1aaa80f0ce8efec4f4929283e44b_JaffaCakes118
Size

69KB
MD5

aced1aaa80f0ce8efec4f4929283e44b
SHA1

cfd537962979b08e454a6ef23cb91270469b7a54
SHA256

701c070fe094c8b0d32f6ab7bba4d4b4b475aab2f390f7c06094771fc9e4f6df
SHA512

ca17c93e3b57885c58e93afab115df458b641009c826349c9b8c3941844cc3fec24dbd70cae33b41ea6f5f423143b8fff68760212cfc71e5776757e85142a07f
SSDEEP

384:r3ZOroCrqqEPttfNCYmSTYBSbYCIeBq86NYFNZeWWP/swojEN7aRNtEzJWUg90iR:r3ArojfnmEzXdNZFWPr9N22WmKOSio33

Score

1^/10

Malware Config

Signatures

Files

aced1aaa80f0ce8efec4f4929283e44b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cadffee943560a8c3450405f24f76178

Code Sign

67:52:ee:b9:eb:d5:e8:4c:b6:5f:33:34:ec:27:cc:0c
Certificate

Issuer

CN=HEwn

Not Before

20/05/2012, 19:10

Not After

31/12/2039, 23:59

Subject

CN=HEwn

Extended Key Usages

ExtKeyUsageCodeSigning

4c:66:09:b7:10:fe:5f:b7:e1:6f:a4:e1:53:9f:e7:12:d0:12:c2:26
Signer

Actual PE Digest

4c:66:09:b7:10:fe:5f:b7:e1:6f:a4:e1:53:9f:e7:12:d0:12:c2:26

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
LoadLibraryA
GetProcAddress
lstrcatW
GetWindowsDirectoryW
VirtualAllocEx
CreateFileW

user32

RegisterClassExA
LoadCursorA
LoadIconA
DefWindowProcA
CreateWindowExA
InvalidateRect
SetClassLongA
SetWindowTextA
GetWindowLongA
SetFocus
MoveWindow
SetRect
GetDialogBaseUnits
GetSysColor
CallWindowProcA
GetKeyState
SetWindowLongA
SetScrollRange
SetScrollPos
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage

gdi32

CreateSolidBrush
SetBkColor
SetTextColor
DeleteObject
GetStockObject

advapi32

RegOpenKeyW
RegCloseKey

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cadffee943560a8c3450405f24f76178

Code Sign

67:52:ee:b9:eb:d5:e8:4c:b6:5f:33:34:ec:27:cc:0cCertificate

Extended Key Usages

4c:66:09:b7:10:fe:5f:b7:e1:6f:a4:e1:53:9f:e7:12:d0:12:c2:26Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 45KB - Virtual size: 44KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 10KB - Virtual size: 10KB

.data2 Size: 10KB - Virtual size: 9KB

.rsrc Size: 1024B - Virtual size: 976B

67:52:ee:b9:eb:d5:e8:4c:b6:5f:33:34:ec:27:cc:0c
Certificate

4c:66:09:b7:10:fe:5f:b7:e1:6f:a4:e1:53:9f:e7:12:d0:12:c2:26
Signer

.text
Size: 45KB - Virtual size: 44KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 10KB - Virtual size: 10KB

.data2
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 1024B - Virtual size: 976B