e0ac7258c21a795c536047a6a2681ec1_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e0ac7258c21a795c536047a6a2681ec1_JaffaCakes118
Size

272KB
MD5

e0ac7258c21a795c536047a6a2681ec1
SHA1

13c30520591747925b70546cd668f2ff2e997381
SHA256

bcc0cc81955edbce996dc5ac1a5ef9ef4fb481d68f967cccdff1c04fce0a8056
SHA512

f83ef4840f05425fa62cbdc8f0517c36f60d834bb2095f232f20bd91dd783961cad1b22f254cbb0bc47d17ef72afcff5cbcd2f44e13c7b62daac5547abe7f8b5
SSDEEP

6144:bbSMHKl1iKQDJQRQ9NzkcJ6OGlEZjcn44rRe:bbSMqlJQDGS9JL6RESn44Ne

Score

1^/10

Malware Config

Signatures

Files

e0ac7258c21a795c536047a6a2681ec1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51faaa25dc23f004def8c4c23e21714d

Code Sign

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77
Certificate

Issuer

CN=ggggggggg

Not Before

17/01/2012, 12:30

Not After

31/12/2039, 23:59

Subject

CN=ggggggggg

Extended Key Usages

ExtKeyUsageCodeSigning

a7:48:b9:4c:43:8e:af:14:20:4c:0c:d7:5e:a9:07:06:e1:15:4d:b2
Signer

Actual PE Digest

a7:48:b9:4c:43:8e:af:14:20:4c:0c:d7:5e:a9:07:06:e1:15:4d:b2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
GetModuleHandleA
GetProcAddress
lstrcmpi
FlushConsoleInputBuffer
lstrcpynW
WritePrivateProfileSectionW
GlobalSize
GetProcessTimes
GetCPInfoExW
GetConsoleDisplayMode
SetConsoleCursorInfo
GetNumberFormatA
ReadFileEx

user32

LoadIconA

advapi32

RegOpenKeyExW

Sections

.text2
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51faaa25dc23f004def8c4c23e21714d

Code Sign

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77Certificate

Extended Key Usages

a7:48:b9:4c:43:8e:af:14:20:4c:0c:d7:5e:a9:07:06:e1:15:4d:b2Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text2 Size: 512B - Virtual size: 512B

.text Size: 266KB - Virtual size: 265KB

.data Size: 1024B - Virtual size: 828B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 308B

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77
Certificate

a7:48:b9:4c:43:8e:af:14:20:4c:0c:d7:5e:a9:07:06:e1:15:4d:b2
Signer

.text2
Size: 512B - Virtual size: 512B

.text
Size: 266KB - Virtual size: 265KB

.data
Size: 1024B - Virtual size: 828B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 308B