d2041358f2700391b27f9381b23253b2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d2041358f2700391b27f9381b23253b2_JaffaCakes118
Size

261KB
MD5

d2041358f2700391b27f9381b23253b2
SHA1

51bbfff6406f5061424f8f7ec8c4cc2e94bc9e05
SHA256

2822b798f27a0ec0bae6978ca38cd0021684ba501654509dc20088be2861ae0d
SHA512

43aff89d98ea0574b5893838a05937c6b36e224e370ad2ae33bd96505ad78587a1d01954e446e0ef0110f399e7971a9669ea17f6a728158c540d0f76ff7fe0b5
SSDEEP

6144:Cnot8IpQZqpFLuoz0z7jvQar2zIcWRvwS33kIqUP4H:CnotZFSoz+7zRrWW1wG3kIHP4H

Score

1^/10

Malware Config

Signatures

Files

d2041358f2700391b27f9381b23253b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

806cdf88058876dfa366d97ae01c0fb2

Code Sign

27:c7:b9:96:c0:c6:48:87:46:7c:f6:97:cd:ea:0b:31
Certificate

Issuer

CN=IpliD9s575EbtmD

Not Before

28/03/2012, 06:44

Not After

31/12/2039, 23:59

Subject

CN=IpliD9s575EbtmD

Extended Key Usages

ExtKeyUsageCodeSigning

31:42:9d:f1:f1:f7:53:22:ad:5a:c5:90:a9:bb:fc:58:d0:fc:02:c0
Signer

Actual PE Digest

31:42:9d:f1:f1:f7:53:22:ad:5a:c5:90:a9:bb:fc:58:d0:fc:02:c0

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
CreateFileA
GetWindowsDirectoryA
LoadLibraryW

user32

GetSystemMetrics

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g
Size: 249KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

806cdf88058876dfa366d97ae01c0fb2

Code Sign

27:c7:b9:96:c0:c6:48:87:46:7c:f6:97:cd:ea:0b:31Certificate

Extended Key Usages

31:42:9d:f1:f1:f7:53:22:ad:5a:c5:90:a9:bb:fc:58:d0:fc:02:c0Signer

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

advapi32

Sections

.text Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 760B

.g5 Size: 1024B - Virtual size: 1000B

.g4 Size: 1024B - Virtual size: 1000B

.g3 Size: 1024B - Virtual size: 1000B

.g2 Size: 1024B - Virtual size: 1000B

.g Size: 249KB - Virtual size: 249KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 140B

27:c7:b9:96:c0:c6:48:87:46:7c:f6:97:cd:ea:0b:31
Certificate

31:42:9d:f1:f1:f7:53:22:ad:5a:c5:90:a9:bb:fc:58:d0:fc:02:c0
Signer

.text
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 760B

.g5
Size: 1024B - Virtual size: 1000B

.g4
Size: 1024B - Virtual size: 1000B

.g3
Size: 1024B - Virtual size: 1000B

.g2
Size: 1024B - Virtual size: 1000B

.g
Size: 249KB - Virtual size: 249KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 140B