d0aa2323b44ab31286e80000c50a2956_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d0aa2323b44ab31286e80000c50a2956_JaffaCakes118
Size

244KB
MD5

d0aa2323b44ab31286e80000c50a2956
SHA1

42fe68431397c9eb117add3a6d49c9419f6c8c5e
SHA256

9919efc0c4775021bfa6ab79ed37d87b08bdf5cf398d1035498e0783cd96aea8
SHA512

b06604c2a722a73e830bb1d104d160319e0c32f01f4929d733204965036192bdb5afb97ecb35b2bba7f419f6d2368a1674f518eb04157cb80975f8e9e8cc7b0b
SSDEEP

6144:JvOgxxd6CB4YQ01gK2wRg7BSPLUkxuVDnwjmM5gJ1:Jvl7H7Rid8cnwjfQ1

Score

1^/10

Malware Config

Signatures

Files

d0aa2323b44ab31286e80000c50a2956_JaffaCakes118
.zip
Ordine.Pdf________________________________________________________________.exe
.exe windows:4 windows x86 arch:x86

990e1e166daa6313ddd8764b5bbaa95c

Code Sign

67:7b:0f:56:de:04:8d:a7:4e:a7:1f:99:23:cc:68:26
Certificate

Issuer

CN=u65ykrty

Not Before

28/01/2012, 05:39

Not After

31/12/2039, 23:59

Subject

CN=u65ykrty

Extended Key Usages

ExtKeyUsageCodeSigning

26:4b:fa:da:c6:0f:dd:ff:63:a3:00:2f:eb:ba:48:c6:ca:cb:1f:82
Signer

Actual PE Digest

26:4b:fa:da:c6:0f:dd:ff:63:a3:00:2f:eb:ba:48:c6:ca:cb:1f:82

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
VirtualAlloc

user32

LoadIconW

advapi32

RegOpenKeyExW

shlwapi

SHRegEnumUSValueA
PathMakeSystemFolderA
PathSetDlgItemPathA
SHRegGetBoolUSValueW
SHRegSetUSValueW
SHRegWriteUSValueA
PathAddExtensionA
ord16

Sections

.text
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text5
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

990e1e166daa6313ddd8764b5bbaa95c

Code Sign

67:7b:0f:56:de:04:8d:a7:4e:a7:1f:99:23:cc:68:26Certificate

Extended Key Usages

26:4b:fa:da:c6:0f:dd:ff:63:a3:00:2f:eb:ba:48:c6:ca:cb:1f:82Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

Sections

.text Size: 303KB - Virtual size: 302KB

.data Size: 1024B - Virtual size: 640B

.text5 Size: 512B - Virtual size: 32B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 164B

67:7b:0f:56:de:04:8d:a7:4e:a7:1f:99:23:cc:68:26
Certificate

26:4b:fa:da:c6:0f:dd:ff:63:a3:00:2f:eb:ba:48:c6:ca:cb:1f:82
Signer

.text
Size: 303KB - Virtual size: 302KB

.data
Size: 1024B - Virtual size: 640B

.text5
Size: 512B - Virtual size: 32B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 164B