b8347cac6f6ceef9a077fe5aea36670a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b8347cac6f6ceef9a077fe5aea36670a_JaffaCakes118
Size

268KB
MD5

b8347cac6f6ceef9a077fe5aea36670a
SHA1

d283e8def7451d4577c74aced6a116b8f838799e
SHA256

3e1ed3df7e1d1452e9924a2f49f4cdd71313d2c8d5d02fa6508ab7ee99938865
SHA512

2f649383876eddf58cc093487d55bc0b48e1d05fc46948b35d5f8d90c430e9eac0f3267bb377c59f68d4ea79f17cae1d0e659344308d307ef57fba64acbc7a57
SSDEEP

6144:SKDKuqyd3oxcdz0jcufgM7e3lSQtV0PoOKEtq70uHRinFBqLTabu00:lD9u+0jcufWlvsoOKEtY/xUBqLSx0

Score

1^/10

Malware Config

Signatures

Files

b8347cac6f6ceef9a077fe5aea36670a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5707ad6a92febb872fdc169934a2d29b

Code Sign

26:f7:53:e5:9e:63:45:bf:43:4a:26:b1:54:15:64:bd
Certificate

Issuer

CN=GggvpYSuFAF7Uqd

Not Before

04/04/2012, 06:53

Not After

31/12/2039, 23:59

Subject

CN=GggvpYSuFAF7Uqd

Extended Key Usages

ExtKeyUsageCodeSigning

f6:4a:f6:cb:1a:81:0e:09:ca:a0:78:ab:e4:51:46:8d:29:af:0f:c9
Signer

Actual PE Digest

f6:4a:f6:cb:1a:81:0e:09:ca:a0:78:ab:e4:51:46:8d:29:af:0f:c9

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
LoadLibraryA
GetProcAddress
GetWindowsDirectoryA
lstrcatA
GetModuleHandleA

gdi32

GetStockObject

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 259KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g7
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g6
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5707ad6a92febb872fdc169934a2d29b

Code Sign

26:f7:53:e5:9e:63:45:bf:43:4a:26:b1:54:15:64:bdCertificate

Extended Key Usages

f6:4a:f6:cb:1a:81:0e:09:ca:a0:78:ab:e4:51:46:8d:29:af:0f:c9Signer

Headers

File Characteristics

Imports

kernel32

gdi32

msvcrt

advapi32

Sections

.text Size: 259KB - Virtual size: 258KB

.data Size: 1024B - Virtual size: 1KB

.g7 Size: 1024B - Virtual size: 1000B

.g6 Size: 1024B - Virtual size: 1000B

.g5 Size: 1024B - Virtual size: 1000B

.g4 Size: 1024B - Virtual size: 1000B

.g3 Size: 1024B - Virtual size: 1000B

.g2 Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 136B

26:f7:53:e5:9e:63:45:bf:43:4a:26:b1:54:15:64:bd
Certificate

f6:4a:f6:cb:1a:81:0e:09:ca:a0:78:ab:e4:51:46:8d:29:af:0f:c9
Signer

.text
Size: 259KB - Virtual size: 258KB

.data
Size: 1024B - Virtual size: 1KB

.g7
Size: 1024B - Virtual size: 1000B

.g6
Size: 1024B - Virtual size: 1000B

.g5
Size: 1024B - Virtual size: 1000B

.g4
Size: 1024B - Virtual size: 1000B

.g3
Size: 1024B - Virtual size: 1000B

.g2
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 136B