e079831e838650b9b89e32d2d9c95bc3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e079831e838650b9b89e32d2d9c95bc3_JaffaCakes118
Size

16KB
MD5

e079831e838650b9b89e32d2d9c95bc3
SHA1

42df031b4d187174f806701a1edce64e9ee241bc
SHA256

2ec66969738222b3fdcdb6ba9ce9352b0cab8fe2e14a5200815948099001b8df
SHA512

cd43fbdff92d093f951c320c3513600bf5fec38a838f5375ac434672fe8c142c6cfd750ac4d12938f3b59c022d04820131dcd4af88c348c7dcad9f46d499f4df
SSDEEP

192:ovTl1BvapySFagKzAKEsgs+MrPXAdn6pIjwT3wZ2VND3koxYcah4ZH:MheySFagKcKEfervAdn6S8TeYam

Score

1^/10

Malware Config

Signatures

Files

e079831e838650b9b89e32d2d9c95bc3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a73818ee6ce929a61f3d475dec82923d

Code Sign

78:64:b8:3d:5e:1c:99:46:b0:af:fb:7b:34:75:94:ca
Certificate

Issuer

CN=55121212512

Not Before

14/02/2012, 04:59

Not After

31/12/2039, 23:59

Subject

CN=55121212512

Extended Key Usages

ExtKeyUsageCodeSigning

a9:21:60:19:c8:e6:0c:5c:47:ce:54:ca:26:da:85:df:45:b2:27:7a
Signer

Actual PE Digest

a9:21:60:19:c8:e6:0c:5c:47:ce:54:ca:26:da:85:df:45:b2:27:7a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA

msvcrt

memset

user32

LoadBitmapA

advapi32

RegOpenKeyExA

version

VerQueryValueA
VerQueryValueW
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a73818ee6ce929a61f3d475dec82923d

Code Sign

78:64:b8:3d:5e:1c:99:46:b0:af:fb:7b:34:75:94:caCertificate

Extended Key Usages

a9:21:60:19:c8:e6:0c:5c:47:ce:54:ca:26:da:85:df:45:b2:27:7aSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

advapi32

version

Sections

.text Size: 2KB - Virtual size: 1KB

.text1 Size: 1024B - Virtual size: 600B

.text2 Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 88B

.rsrc Size: 2KB - Virtual size: 1KB

78:64:b8:3d:5e:1c:99:46:b0:af:fb:7b:34:75:94:ca
Certificate

a9:21:60:19:c8:e6:0c:5c:47:ce:54:ca:26:da:85:df:45:b2:27:7a
Signer

.text
Size: 2KB - Virtual size: 1KB

.text1
Size: 1024B - Virtual size: 600B

.text2
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 88B

.rsrc
Size: 2KB - Virtual size: 1KB