ac51f13c0526b4aeb01378f8ad01e9f9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ac51f13c0526b4aeb01378f8ad01e9f9_JaffaCakes118
Size

40KB
MD5

ac51f13c0526b4aeb01378f8ad01e9f9
SHA1

691f056d8d7f0bc1ac85819e02e5d634e6de1eb7
SHA256

4ada83beaa25d2e865ebcae9365cc5b6ec0af0f3dd0908f971ffbc8f765ebac5
SHA512

cb2b8b0dec6f738bd02fd9acfd5488a28c8e75e1d93ae8e976b984da1dbc396aa43faf5bd96e102e1a7f843be75613119403c0ed60b2cb6b8e8197dbce2561bc
SSDEEP

384:yPmWciZju2ZRpEQuxNMzxtHnWWNWVTb59CFu99Us5TMPKuIBYBr1w1l5ZlOlblP4:yKituopE/YWW8V59ku9J5TXYr1qHo9O

Score

1^/10

Malware Config

Signatures

Files

ac51f13c0526b4aeb01378f8ad01e9f9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fb08aacbf83d17ad60d5dd5adfbaf6bb

Code Sign

4b:d9:89:fa:df:30:29:b7:40:1c:a0:58:a7:e2:2d:90
Certificate

Issuer

CN=SharpSoft

Not Before

04/08/2009, 08:14

Not After

31/12/2039, 23:59

Subject

CN=SharpSoft

78:43:c3:de:15:4a:bf:23:0a:46:31:32:ad:68:c9:62:90:98:a2:72
Signer

Actual PE Digest

78:43:c3:de:15:4a:bf:23:0a:46:31:32:ad:68:c9:62:90:98:a2:72

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
MoveFileExA
FreeLibrary
WriteFile
CreateProcessA
GetSystemDirectoryA
lstrcatA
GetLastError
lstrcmpiA
LoadLibraryA
MoveFileA
GetModuleFileNameA
CloseHandle
DeleteFileA
lstrcpyA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
IsDebuggerPresent

user32

CopyIcon
LoadCursorA
SetSystemCursor

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.oli
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fb08aacbf83d17ad60d5dd5adfbaf6bb

Code Sign

4b:d9:89:fa:df:30:29:b7:40:1c:a0:58:a7:e2:2d:90Certificate

78:43:c3:de:15:4a:bf:23:0a:46:31:32:ad:68:c9:62:90:98:a2:72Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 1024B - Virtual size: 874B

.data Size: 31KB - Virtual size: 31KB

.CRT Size: 512B - Virtual size: 4B

.reloc Size: 1024B - Virtual size: 696B

.oli Size: - Virtual size: 4KB

4b:d9:89:fa:df:30:29:b7:40:1c:a0:58:a7:e2:2d:90
Certificate

78:43:c3:de:15:4a:bf:23:0a:46:31:32:ad:68:c9:62:90:98:a2:72
Signer

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1024B - Virtual size: 874B

.data
Size: 31KB - Virtual size: 31KB

.CRT
Size: 512B - Virtual size: 4B

.reloc
Size: 1024B - Virtual size: 696B

.oli
Size: - Virtual size: 4KB