d3452cc6287a6a22ec0efb0f54b2547a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d3452cc6287a6a22ec0efb0f54b2547a_JaffaCakes118
Size

436KB
MD5

d3452cc6287a6a22ec0efb0f54b2547a
SHA1

ca3f8223d46b75fad25f9f121d582cfb2842dc1c
SHA256

ce3e5f00c6f7f95008c0c0179405e962037760854f1202a23cf22eb4ee52402c
SHA512

04b90df9692e23369a13f54caf5486495a9f6285f3a18c3e6a235db49a49cd231cb480c70ea31e22eb1f4c22763edbba54ed54aa2844857af7e45db5fb67a161
SSDEEP

12288:uwweWsWhesgw6QYtzJ8AfMauSBSGFjHqf0NsE:7F6Ew2J8AkmMQl

Score

1^/10

Malware Config

Signatures

Files

d3452cc6287a6a22ec0efb0f54b2547a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e82db270aff25119d883dd73f247d4dd

Code Sign

52:af:06:0b:7e:2a:f2:60:bc:3e:db:4a:ca:03:b6:4b
Certificate

Issuer

CN=ndznwnlgzxe

Not Before

06/01/2012, 22:35

Not After

09/09/2021, 22:00

Subject

CN=Hernolu

50:ff:53:17:46:64:5f:68:1b:ce:1d:7b:ca:e0:bb:14:7a:02:e9:d6
Signer

Actual PE Digest

50:ff:53:17:46:64:5f:68:1b:ce:1d:7b:ca:e0:bb:14:7a:02:e9:d6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleConvertOLESTREAMToIStorage

oleaut32

OleSavePictureFile

kernel32

GetCurrentThreadId
GetStringTypeA
LCMapStringW
LCMapStringA
GetStartupInfoA
GetCommandLineA
TlsSetValue
VirtualAlloc
GetFileType
GetProcAddress
TlsGetValue
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeW
TlsAlloc
SetLastError
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enxdax
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qagn
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e82db270aff25119d883dd73f247d4dd

Code Sign

52:af:06:0b:7e:2a:f2:60:bc:3e:db:4a:ca:03:b6:4bCertificate

50:ff:53:17:46:64:5f:68:1b:ce:1d:7b:ca:e0:bb:14:7a:02:e9:d6Signer

Headers

File Characteristics

Imports

ole32

oleaut32

kernel32

Sections

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 96KB

.enxdax Size: 300KB - Virtual size: 300KB

.qagn Size: 103KB - Virtual size: 102KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 3KB - Virtual size: 2KB

52:af:06:0b:7e:2a:f2:60:bc:3e:db:4a:ca:03:b6:4b
Certificate

50:ff:53:17:46:64:5f:68:1b:ce:1d:7b:ca:e0:bb:14:7a:02:e9:d6
Signer

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 96KB

.enxdax
Size: 300KB - Virtual size: 300KB

.qagn
Size: 103KB - Virtual size: 102KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 3KB - Virtual size: 2KB