b20d66712cf323fdf44a80961a7713c2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b20d66712cf323fdf44a80961a7713c2_JaffaCakes118
Size

120KB
MD5

b20d66712cf323fdf44a80961a7713c2
SHA1

e7e19d161bc3dcb3d67e0926715785ab6497712e
SHA256

224ec17220b96d10ca3b2416819364a4ab9b2cad1aeeb9dc2097257c138ed6c8
SHA512

c8e081975721a9a90169e2f9d7ffa0e1a70fcaf31097d70f621b90bae183f9630e058445aefd06c07be7e7244fbb7e0aa187a8c15bff1a93fd5fdd5dabb65b90
SSDEEP

1536:T3EWRXsptfw6sdxwTqiIsEtGp+LSP7OljFYOylhKxhR0s6WKuHKHkb:Tupto6TQsr7CjoHKxhJ6W9

Score

1^/10

Malware Config

Signatures

Files

b20d66712cf323fdf44a80961a7713c2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

995250a83e553eae965dd5150256509a

Code Sign

48:67:83:cc:93:10:08:4d:b9:94:24:a4:46:f3:4c:e3
Certificate

Issuer

CN=Dk1p

Not Before

20/06/2012, 04:11

Not After

31/12/2039, 23:59

Subject

CN=Dk1p

Extended Key Usages

ExtKeyUsageCodeSigning

9f:76:ad:d5:34:50:d3:ca:7d:2c:57:99:f8:8c:51:40:25:76:15:13
Signer

Actual PE Digest

9f:76:ad:d5:34:50:d3:ca:7d:2c:57:99:f8:8c:51:40:25:76:15:13

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
FileTimeToDosDateTime
lstrcatA
LoadLibraryW
ReadFile
GetCommandLineA
CreateFileA
FindNextFileW
GetConsoleAliasExesA
ProcessIdToSessionId
QueueUserAPC
SetComputerNameExA
lstrcmpW

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 422B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.16
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data18
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data17
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data16
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data15
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data14
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data13
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data12
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

995250a83e553eae965dd5150256509a

Code Sign

48:67:83:cc:93:10:08:4d:b9:94:24:a4:46:f3:4c:e3Certificate

Extended Key Usages

9f:76:ad:d5:34:50:d3:ca:7d:2c:57:99:f8:8c:51:40:25:76:15:13Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 108KB - Virtual size: 108KB

.rdata Size: 512B - Virtual size: 422B

.data Size: 512B - Virtual size: 420B

.16 Size: 1024B - Virtual size: 1024B

.data18 Size: 1024B - Virtual size: 1000B

.data17 Size: 1024B - Virtual size: 1000B

.data16 Size: 1024B - Virtual size: 1000B

.data15 Size: 1024B - Virtual size: 1000B

.data14 Size: 1024B - Virtual size: 1000B

.data13 Size: 1024B - Virtual size: 1000B

.data12 Size: 1024B - Virtual size: 1000B

.reloc Size: 1024B - Virtual size: 256KB

48:67:83:cc:93:10:08:4d:b9:94:24:a4:46:f3:4c:e3
Certificate

9f:76:ad:d5:34:50:d3:ca:7d:2c:57:99:f8:8c:51:40:25:76:15:13
Signer

.text
Size: 108KB - Virtual size: 108KB

.rdata
Size: 512B - Virtual size: 422B

.data
Size: 512B - Virtual size: 420B

.16
Size: 1024B - Virtual size: 1024B

.data18
Size: 1024B - Virtual size: 1000B

.data17
Size: 1024B - Virtual size: 1000B

.data16
Size: 1024B - Virtual size: 1000B

.data15
Size: 1024B - Virtual size: 1000B

.data14
Size: 1024B - Virtual size: 1000B

.data13
Size: 1024B - Virtual size: 1000B

.data12
Size: 1024B - Virtual size: 1000B

.reloc
Size: 1024B - Virtual size: 256KB