ad9e4a88aff705a7c322ebd4d55e3f63_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ad9e4a88aff705a7c322ebd4d55e3f63_JaffaCakes118
Size

376KB
MD5

ad9e4a88aff705a7c322ebd4d55e3f63
SHA1

b052038629ec3adc6ebcab5370e3c77123908444
SHA256

9449f1e0f6e46e4dac007f1ce68bf526be935769f437bf7464ff1843182c696b
SHA512

9f02a06b2335327487963e6d732153863a436fb52d2b8bd0e54331717fef9458e69bd5fb785a2924ae8c145e4507e8e177f262398153749110c7ddb796f39c53
SSDEEP

6144:8qqFLB8oOCf/cAl+Lyi+AiHhrOak7Lias4fPbHX:7qUCMAI2PXhrO97DlrHX

Score

1^/10

Malware Config

Signatures

Files

ad9e4a88aff705a7c322ebd4d55e3f63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0e3c82d70aee7b576fb1792ca507a00

Code Sign

44:6a:d8:6a:af:f5:bd:4e:ba:bf:7e:4a:fb:87:3f:b3
Certificate

Issuer

CN=cUOiFinbahmNzvTKd mDvhrOweoOVDALaYBzrHSFJDSiBJnoEGFIXLbiBTUUxwoTHpKe LYkeWtKBVBRQAYZpBrPFyZfnOtsfJdYyFbBcZPFgtfCCeRlFiMyHhRPvNKNPhTArmEtIGKzLatzRvnxWR

Not Before

29/06/2012, 09:34

Not After

31/12/2039, 23:59

Subject

CN=cUOiFinbahmNzvTKd mDvhrOweoOVDALaYBzrHSFJDSiBJnoEGFIXLbiBTUUxwoTHpKe LYkeWtKBVBRQAYZpBrPFyZfnOtsfJdYyFbBcZPFgtfCCeRlFiMyHhRPvNKNPhTArmEtIGKzLatzRvnxWR

Extended Key Usages

ExtKeyUsageCodeSigning

36:9b:74:d4:a3:b7:7c:36:0c:6d:d8:e6:03:ff:be:6b:75:ee:cb:9a
Signer

Actual PE Digest

36:9b:74:d4:a3:b7:7c:36:0c:6d:d8:e6:03:ff:be:6b:75:ee:cb:9a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
lstrcatW
CreateFileW
CloseHandle
GetCommandLineA
VirtualAllocEx

advapi32

RegCloseKey
RegOpenKeyW

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0e3c82d70aee7b576fb1792ca507a00

Code Sign

44:6a:d8:6a:af:f5:bd:4e:ba:bf:7e:4a:fb:87:3f:b3Certificate

Extended Key Usages

36:9b:74:d4:a3:b7:7c:36:0c:6d:d8:e6:03:ff:be:6b:75:ee:cb:9aSigner

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 51KB - Virtual size: 51KB

.data Size: 1024B - Virtual size: 920B

.data4 Size: 1024B - Virtual size: 1000B

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 318KB - Virtual size: 318KB

.reloc Size: 512B - Virtual size: 224B

44:6a:d8:6a:af:f5:bd:4e:ba:bf:7e:4a:fb:87:3f:b3
Certificate

36:9b:74:d4:a3:b7:7c:36:0c:6d:d8:e6:03:ff:be:6b:75:ee:cb:9a
Signer

.text
Size: 51KB - Virtual size: 51KB

.data
Size: 1024B - Virtual size: 920B

.data4
Size: 1024B - Virtual size: 1000B

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 318KB - Virtual size: 318KB

.reloc
Size: 512B - Virtual size: 224B