dcac7263629d8d31aec1139cab93add9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

dcac7263629d8d31aec1139cab93add9_JaffaCakes118
Size

167KB
MD5

dcac7263629d8d31aec1139cab93add9
SHA1

8a81ce558be00562ef75fc87c305dbde61d9c0a2
SHA256

49bba6fe819b51fd4152a3fb1862245ed53684e07245e9b8081f18edc104c7b2
SHA512

31564e06b014a788899857b2f0005176aee3d69d73cd6ff78c9aa7b40639662c1410c061b3e5be9919b02900cb3b70ee279d3f9b13682133d5af6765ec59b5f1
SSDEEP

3072:b8QYqae+C7HJdgBVunxgMeaWpEKmyELhDN7ZXpOclQbQYm:b84UoHJd7+0NzXhRZvlQQYm

Score

1^/10

Malware Config

Signatures

Files

dcac7263629d8d31aec1139cab93add9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d310b66c576693117e860c5292ed71a1

Code Sign

01
Certificate

Issuer

CN=Alexander Default Development Root

Not Before

22/06/2009, 15:01

Not After

22/06/2014, 15:01

Subject

CN=Alexander Default Development Code-Signing

Extended Key Usages

ExtKeyUsageCodeSigning

04:ff:e0:e4:80:b1:5c:bb:f6:ae:34:24:26:0d:08:02:d5:79:e2:e5
Signer

Actual PE Digest

04:ff:e0:e4:80:b1:5c:bb:f6:ae:34:24:26:0d:08:02:d5:79:e2:e5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetCurrentThreadId
GetEnvironmentVariableA
GetFileAttributesA
GetComputerNameA
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GlobalAlloc
Sleep
VirtualProtect
GetCommandLineA
FindClose
DeleteFileA
CreateProcessA
CreateIoCompletionPort
CreateFileA
GetLastError

advapi32

RegSetValueA
RegQueryValueExA
RegQueryValueA
RegEnumValueA
RegEnumKeyExA
RegEnumKeyA
RegDeleteValueA
RegCloseKey

user32

AppendMenuA
BeginPaint
CallWindowProcA
CharNextA
CharUpperBuffA
CheckDlgButton
ClientToScreen
CopyRect
CreatePopupMenu

Sections

.text
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1022B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d310b66c576693117e860c5292ed71a1

Code Sign

01Certificate

Extended Key Usages

04:ff:e0:e4:80:b1:5c:bb:f6:ae:34:24:26:0d:08:02:d5:79:e2:e5Signer

Headers

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 161KB - Virtual size: 160KB

.rdata Size: 1024B - Virtual size: 1022B

.data Size: - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 662B

01
Certificate

04:ff:e0:e4:80:b1:5c:bb:f6:ae:34:24:26:0d:08:02:d5:79:e2:e5
Signer

.text
Size: 161KB - Virtual size: 160KB

.rdata
Size: 1024B - Virtual size: 1022B

.data
Size: - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 662B