b45faf6f673e52480d221f931bf62300_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b45faf6f673e52480d221f931bf62300_JaffaCakes118
Size

272KB
MD5

b45faf6f673e52480d221f931bf62300
SHA1

bee80c75eab484e944adc540f19dee6d0f189c9c
SHA256

9fe3f8a049995fac58500d8dafa4e39cd300993c27f85e7fb6e2448bfbe00547
SHA512

cee9ae3fa3bfa0d0606b4305034325a4f4481bdca2bd4589e08836deb911c2d7f18611088c0e111044877c2294052ca1fbeedc8c82c44a89db2fb05c6c75ad81
SSDEEP

6144:ZbSMuKl1iKGDJQRQ9NzkcJ6OGlOZjcn44rRL:ZbSMVlJGDGS9JL6ROSn44NL

Score

1^/10

Malware Config

Signatures

Files

b45faf6f673e52480d221f931bf62300_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51faaa25dc23f004def8c4c23e21714d

Code Sign

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77
Certificate

Issuer

CN=ggggggggg

Not Before

17/01/2012, 12:30

Not After

31/12/2039, 23:59

Subject

CN=ggggggggg

Extended Key Usages

ExtKeyUsageCodeSigning

cc:85:ba:c6:5d:08:15:d2:b0:57:f3:5a:28:78:f6:57:f1:b3:4c:5d
Signer

Actual PE Digest

cc:85:ba:c6:5d:08:15:d2:b0:57:f3:5a:28:78:f6:57:f1:b3:4c:5d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
GetModuleHandleA
GetProcAddress
lstrcmpi
FlushConsoleInputBuffer
lstrcpynW
WritePrivateProfileSectionW
GlobalSize
GetProcessTimes
GetCPInfoExW
GetConsoleDisplayMode
SetConsoleCursorInfo
GetNumberFormatA
ReadFileEx

user32

LoadIconA

advapi32

RegOpenKeyExW

Sections

.text2
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51faaa25dc23f004def8c4c23e21714d

Code Sign

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77Certificate

Extended Key Usages

cc:85:ba:c6:5d:08:15:d2:b0:57:f3:5a:28:78:f6:57:f1:b3:4c:5dSigner

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text2 Size: 512B - Virtual size: 512B

.text Size: 266KB - Virtual size: 265KB

.data Size: 1024B - Virtual size: 828B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 308B

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77
Certificate

cc:85:ba:c6:5d:08:15:d2:b0:57:f3:5a:28:78:f6:57:f1:b3:4c:5d
Signer

.text2
Size: 512B - Virtual size: 512B

.text
Size: 266KB - Virtual size: 265KB

.data
Size: 1024B - Virtual size: 828B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 308B