c1665420a047c99fd1defadea59b6ebe_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c1665420a047c99fd1defadea59b6ebe_JaffaCakes118
Size

187KB
MD5

c1665420a047c99fd1defadea59b6ebe
SHA1

200843c018ec526a09bf76b3bb61117c17e6acf4
SHA256

5a9f1a403fb1cc05528a314558d9647c9cc4ee7db87372a1fde2a6a7dc2bcc06
SHA512

8fc4899ca22116bf9b50c52b7d8d1776dfceb13a3ef64390d08dd39b2e46cd3418f9db9d50845b0283fbae065c1117acb6b295fe6a237326af632047737006ba
SSDEEP

3072:2Yk3xN5In9qBMpqxUJGZ75vEP7Tj2vdLF/oHrEJsYaPWPoKrGECWqz:089sSsUw7iP7Tj2lLFEIvT7CWqz

Score

1^/10

Malware Config

Signatures

Files

c1665420a047c99fd1defadea59b6ebe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca5205d29d2e0fa326b0238a3aaed518

Code Sign

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2
Certificate

Issuer

CN=Application Compatibility UI

Not Before

31/12/2008, 16:00

Not After

31/12/2014, 16:00

Subject

CN=Application Compatibility UI

Extended Key Usages

ExtKeyUsageCodeSigning

b1:77:f4:36:74:c6:b3:d1:86:12:f0:2a:f7:4a:73:f9:6e:0e:96:e9
Signer

Actual PE Digest

b1:77:f4:36:74:c6:b3:d1:86:12:f0:2a:f7:4a:73:f9:6e:0e:96:e9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

GetKeyboardType
MessageBoxA

advapi32

RegQueryValueExA

Sections

<
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

>
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

=
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

>
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

)
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

%
Size: 512B - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

"
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

)
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca5205d29d2e0fa326b0238a3aaed518

Code Sign

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2Certificate

Extended Key Usages

b1:77:f4:36:74:c6:b3:d1:86:12:f0:2a:f7:4a:73:f9:6e:0e:96:e9Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

< Size: - Virtual size: 20KB

> Size: - Virtual size: 260B

0 Size: - Virtual size: 1KB

2 Size: - Virtual size: 1KB

= Size: - Virtual size: 8B

> Size: 512B - Virtual size: 24B

) Size: - Virtual size: 1KB

% Size: 512B - Virtual size: 132KB

8 Size: - Virtual size: 19KB

" Size: 184KB - Virtual size: 183KB

) Size: 512B - Virtual size: 108B

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2
Certificate

b1:77:f4:36:74:c6:b3:d1:86:12:f0:2a:f7:4a:73:f9:6e:0e:96:e9
Signer

<
Size: - Virtual size: 20KB

>
Size: - Virtual size: 260B

0
Size: - Virtual size: 1KB

2
Size: - Virtual size: 1KB

=
Size: - Virtual size: 8B

>
Size: 512B - Virtual size: 24B

)
Size: - Virtual size: 1KB

%
Size: 512B - Virtual size: 132KB

8
Size: - Virtual size: 19KB

"
Size: 184KB - Virtual size: 183KB

)
Size: 512B - Virtual size: 108B