aed56da56339cad8af63177bd93a6014_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

aed56da56339cad8af63177bd93a6014_JaffaCakes118
Size

270KB
MD5

aed56da56339cad8af63177bd93a6014
SHA1

301f8b399b168b1ec1f2b05abca6c9c8b143a4fa
SHA256

a41d723151f076c31c8b1f9b6ebbaa24058b5efa2872279c25934029fb858a4a
SHA512

4e33113bb2aefb08367b61ea7cae160af8780ae9df8fb94d0ac42e889a421276ba55bd71798fe31fcbbf7ded70f12197c306e36932aa11a480459e0a85c60850
SSDEEP

6144:8g9i8921cdzRTYN1OfIy5P1R1FUb9Yl5tSHEvkSVH6qIceYsCK3CL:993921cdRk1CtVVto6fH624CD

Score

1^/10

Malware Config

Signatures

Files

aed56da56339cad8af63177bd93a6014_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6b9626a3d7cd225a5a53bbea77d9eb2

Code Sign

6c:11:47:2e:00:cf:a0:6c:b3:22:e2:36:f7:b5:ad:21
Certificate

Issuer

CN=j99zWTOf8FdlY6t

Not Before

05/04/2012, 07:07

Not After

31/12/2039, 23:59

Subject

CN=j99zWTOf8FdlY6t

Extended Key Usages

ExtKeyUsageCodeSigning

64:90:23:2a:03:38:aa:e8:0a:f9:7d:50:2d:b2:ee:f5:51:ec:d5:50
Signer

Actual PE Digest

64:90:23:2a:03:38:aa:e8:0a:f9:7d:50:2d:b2:ee:f5:51:ec:d5:50

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetWindowsDirectoryA
lstrcatA
GetModuleHandleA
GetProcAddress

gdi32

GetStockObject

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 261KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l7
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l6
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6b9626a3d7cd225a5a53bbea77d9eb2

Code Sign

6c:11:47:2e:00:cf:a0:6c:b3:22:e2:36:f7:b5:ad:21Certificate

Extended Key Usages

64:90:23:2a:03:38:aa:e8:0a:f9:7d:50:2d:b2:ee:f5:51:ec:d5:50Signer

Headers

File Characteristics

Imports

kernel32

gdi32

msvcrt

advapi32

Sections

.text Size: 261KB - Virtual size: 260KB

.data Size: 1024B - Virtual size: 1KB

.l7 Size: 1024B - Virtual size: 1000B

.l6 Size: 1024B - Virtual size: 1000B

.l5 Size: 1024B - Virtual size: 1000B

.l4 Size: 1024B - Virtual size: 1000B

.l3 Size: 1024B - Virtual size: 1000B

.l2 Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 108B

6c:11:47:2e:00:cf:a0:6c:b3:22:e2:36:f7:b5:ad:21
Certificate

64:90:23:2a:03:38:aa:e8:0a:f9:7d:50:2d:b2:ee:f5:51:ec:d5:50
Signer

.text
Size: 261KB - Virtual size: 260KB

.data
Size: 1024B - Virtual size: 1KB

.l7
Size: 1024B - Virtual size: 1000B

.l6
Size: 1024B - Virtual size: 1000B

.l5
Size: 1024B - Virtual size: 1000B

.l4
Size: 1024B - Virtual size: 1000B

.l3
Size: 1024B - Virtual size: 1000B

.l2
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 108B