b9a11e01724020c92bc6c978c3cd1ec0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b9a11e01724020c92bc6c978c3cd1ec0_JaffaCakes118
Size

176KB
MD5

b9a11e01724020c92bc6c978c3cd1ec0
SHA1

cba4281bd87e00dec97c5a2a46c3a32afb113d92
SHA256

fff5378ee21a29e5964823b27beef95f492bc3712bd290d7f469b36d8b3c7f44
SHA512

aa1882e07046c53f1ced6e149008a590bfb72e32fd1d88e8d801cf6491d15518324138fe5045654cd1f85df9ec213221c885da050971ef2b1bde2064c370f6bd
SSDEEP

3072:OP1AUfx0iojyVQXb7gnRHpP1kEuQ7tlrz/3BYAURlm:OP3p0jyV8b7ARz9uQxFaAUR8

Score

1^/10

Malware Config

Signatures

Files

b9a11e01724020c92bc6c978c3cd1ec0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca5205d29d2e0fa326b0238a3aaed518

Code Sign

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2
Certificate

Issuer

CN=Application Compatibility UI

Not Before

31/12/2008, 16:00

Not After

31/12/2014, 16:00

Subject

CN=Application Compatibility UI

Extended Key Usages

ExtKeyUsageCodeSigning

15:5f:71:0f:cc:0f:34:1d:11:77:da:d5:ba:71:31:28:a2:37:d4:91
Signer

Actual PE Digest

15:5f:71:0f:cc:0f:34:1d:11:77:da:d5:ba:71:31:28:a2:37:d4:91

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

GetKeyboardType
MessageBoxA

advapi32

RegQueryValueExA

Sections

;
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

$
Size: - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

>
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

)
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

<
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

'
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0
Size: 512B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

'
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

+
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca5205d29d2e0fa326b0238a3aaed518

Code Sign

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2Certificate

Extended Key Usages

15:5f:71:0f:cc:0f:34:1d:11:77:da:d5:ba:71:31:28:a2:37:d4:91Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

; Size: - Virtual size: 15KB

$ Size: - Virtual size: 164B

> Size: - Virtual size: 1KB

) Size: - Virtual size: 1KB

0 Size: - Virtual size: 8B

< Size: 512B - Virtual size: 24B

' Size: - Virtual size: 1KB

0 Size: 512B - Virtual size: 124KB

' Size: - Virtual size: 17KB

+ Size: 173KB - Virtual size: 172KB

9 Size: 512B - Virtual size: 104B

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2
Certificate

15:5f:71:0f:cc:0f:34:1d:11:77:da:d5:ba:71:31:28:a2:37:d4:91
Signer

;
Size: - Virtual size: 15KB

$
Size: - Virtual size: 164B

>
Size: - Virtual size: 1KB

)
Size: - Virtual size: 1KB

0
Size: - Virtual size: 8B

<
Size: 512B - Virtual size: 24B

'
Size: - Virtual size: 1KB

0
Size: 512B - Virtual size: 124KB

'
Size: - Virtual size: 17KB

+
Size: 173KB - Virtual size: 172KB

9
Size: 512B - Virtual size: 104B