d1a771abce7575d4868f8ac183cbde7e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d1a771abce7575d4868f8ac183cbde7e_JaffaCakes118
Size

60KB
MD5

d1a771abce7575d4868f8ac183cbde7e
SHA1

d5c2f7edf7360bce0bc69b283e391e60185ab4b1
SHA256

5fb1236cdb67cf866c1a36caa9aade7ad368af090c960c4a92d61faf08b25648
SHA512

1af4e808287bbff1b2da51ef56903144ca04b15331d1de3981611f93e06d8ace06d1eabcad83649900850accf35c18a2c91775bd88237c1718158eed72d89331
SSDEEP

1536:UHgtKVrlzS7QQ3CfmHynNG9ijK9MGvjfaVI9q77ralcJQUX:UHQKVrlWQiSnNGMuMqSVqnlMX

Score

1^/10

Malware Config

Signatures

Files

d1a771abce7575d4868f8ac183cbde7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93b5201d57470bdee489ff3f4140bac0

Code Sign

17:32:43:34:4e:b8:26:66:b7:2c:96:ac:04:96:9b:4e
Certificate

Issuer

CN=Root dddddd

Not Before

26/11/2009, 10:43

Not After

31/12/2039, 23:59

Subject

CN=caca.0ps,O=y,1.2.840.113549.1.9.1=#130c63636661736464642e706f70

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
VirtualFreeEx
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
CreateProcessA
GetModuleFileNameA
GetCurrentProcess
SetThreadContext
ResumeThread
GetThreadContext

advapi32.dll�

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA

msvcrt.dll�

malloc
fclose
??3@YAXPAX@Z
fread
fseek
fopen
free

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cw
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CBtrl
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.saa
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93b5201d57470bdee489ff3f4140bac0

Code Sign

17:32:43:34:4e:b8:26:66:b7:2c:96:ac:04:96:9b:4eCertificate

Signer

Headers

File Characteristics

Imports

kernel32

advapi32.dll�

msvcrt.dll�

Sections

.text Size: 2KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 16B

.cw Size: 512B - Virtual size: 512B

.CBtrl Size: 51KB - Virtual size: 52KB

.saa Size: 512B - Virtual size: 44B

17:32:43:34:4e:b8:26:66:b7:2c:96:ac:04:96:9b:4e
Certificate

.text
Size: 2KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 16B

.cw
Size: 512B - Virtual size: 512B

.CBtrl
Size: 51KB - Virtual size: 52KB

.saa
Size: 512B - Virtual size: 44B