d9e5dfc16ea503d73222b6e01ac8b40e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d9e5dfc16ea503d73222b6e01ac8b40e_JaffaCakes118
Size

438KB
MD5

d9e5dfc16ea503d73222b6e01ac8b40e
SHA1

4404b13e86ea1f7aefdda94da0ace07ffaf3adb8
SHA256

9f2a9d3003b70869e56c2cbc1af7402c7f054053e90cb8231791e011080e882a
SHA512

000643fccc46267a9884026ce4ca654a9028c6f45bf485a138470ee6a615dfd7a6dc0595fafe4446c9f2ef8726855ca476ed8e065a2152cb897ec8bd32784274
SSDEEP

12288:GQKGK5B+hkPxzwyfI636ChTgVRr2kQVpo:0X+iFww3vhTKrxQVpo

Score

1^/10

Malware Config

Signatures

Files

d9e5dfc16ea503d73222b6e01ac8b40e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

89583cf2c95d6addf21a5ad301a9373f

Code Sign

51:03:16:d9:70:88:ad:4e:bb:1a:61:b5:93:e6:13:c0
Certificate

Issuer

CN=dvlsezsznef

Not Before

19/01/2012, 19:49

Not After

31/12/2039, 23:59

Subject

CN=Masjikol

30:39:21:23:23:c7:64:d8:d8:1c:6d:96:b1:7c:88:2e:a7:00:1d:0c
Signer

Actual PE Digest

30:39:21:23:23:c7:64:d8:d8:1c:6d:96:b1:7c:88:2e:a7:00:1d:0c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

PropVariantCopy
ReadFmtUserTypeStg
CreateDataAdviseHolder
OleCreateFromFile
CoCreateGuid
CreateBindCtx
CoUnmarshalInterface
OleCreateDefaultHandler
StgOpenStorageEx
OleSetContainedObject
OleCreateMenuDescriptor
PropStgNameToFmtId

kernel32

EnterCriticalSection
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetOEMCP
GetACP
PulseEvent
LocalAlloc
LocalLock
GlobalFlags
IsBadWritePtr
VirtualQuery
GetOverlappedResult
GlobalMemoryStatus
SetLocaleInfoA
IsBadCodePtr
SetThreadLocale
GetUserDefaultLCID
HeapLock
GetTimeFormatA
OpenEventA
GetStartupInfoA
GetProcAddress
GetModuleHandleA
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
ExitProcess
HeapFree
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
HeapAlloc
InitializeCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ttlmt
Size: 401KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

89583cf2c95d6addf21a5ad301a9373f

Code Sign

51:03:16:d9:70:88:ad:4e:bb:1a:61:b5:93:e6:13:c0Certificate

30:39:21:23:23:c7:64:d8:d8:1c:6d:96:b1:7c:88:2e:a7:00:1d:0cSigner

Headers

File Characteristics

Imports

ole32

kernel32

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 3KB - Virtual size: 100KB

.ttlmt Size: 401KB - Virtual size: 400KB

.rsrc Size: 5KB - Virtual size: 5KB

51:03:16:d9:70:88:ad:4e:bb:1a:61:b5:93:e6:13:c0
Certificate

30:39:21:23:23:c7:64:d8:d8:1c:6d:96:b1:7c:88:2e:a7:00:1d:0c
Signer

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 3KB - Virtual size: 100KB

.ttlmt
Size: 401KB - Virtual size: 400KB

.rsrc
Size: 5KB - Virtual size: 5KB