ea51385c97cfb1c4a9aaaac749f7aad7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ea51385c97cfb1c4a9aaaac749f7aad7_JaffaCakes118
Size

307KB
MD5

ea51385c97cfb1c4a9aaaac749f7aad7
SHA1

f1ab2a0181ab2758acced932842fd4f889d54f69
SHA256

e59f679f0140bc5e51d48bbbe80d4d4787675250331f05a66c3f71454a688fde
SHA512

c7380416610a69279084f9d352c7dd9b73942fdcf0a34b8d8646aebdffa97098fbe20bfcf32f6d80eee70e26392e5907d25b8c2f83b68935c9eab5c3a899ac0f
SSDEEP

3072:1eTTtjngjwtKUetxdRnvf+wwJQQCCugjWfTbSj4BmhcI/PdCQbb1jDarZHkh3pVN:12JjgjwX8dRnh5LTb5k5CLrmpJAuFXw8

Score

1^/10

Malware Config

Signatures

Files

ea51385c97cfb1c4a9aaaac749f7aad7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d9035f7f7b589f6a5b3fa10c446cb5de

Code Sign

9a:e3:7a:55:37:f1:b6:82:c0:2a:83:5b:cc:61:e4:c9
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/07/2013, 00:00

Not After

24/07/2016, 23:59

Subject

CN=Daniel Hareuveni,O=Daniel Hareuveni,POSTALCODE=6958301,STREET=Yair Rozenblum 15,L=Tel aviv,ST=Israel,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4f:51:9b:c5:56:2e:15:6b:a5:a1:33:63:01:2e:da:58:73:43:68:77
Signer

Actual PE Digest

4f:51:9b:c5:56:2e:15:6b:a5:a1:33:63:01:2e:da:58:73:43:68:77

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFile
LocalAlloc
CreateFileMappingW

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9035f7f7b589f6a5b3fa10c446cb5de

Code Sign

9a:e3:7a:55:37:f1:b6:82:c0:2a:83:5b:cc:61:e4:c9Certificate

Extended Key Usages

Key Usages

4f:51:9b:c5:56:2e:15:6b:a5:a1:33:63:01:2e:da:58:73:43:68:77Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 38KB - Virtual size: 37KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 21KB - Virtual size: 32KB

.data3 Size: 40KB - Virtual size: 39KB

.data1 Size: 39KB - Virtual size: 39KB

.data2 Size: 36KB - Virtual size: 36KB

.rsrc Size: 108KB - Virtual size: 107KB

.reloc Size: 1KB - Virtual size: 1KB

9a:e3:7a:55:37:f1:b6:82:c0:2a:83:5b:cc:61:e4:c9
Certificate

4f:51:9b:c5:56:2e:15:6b:a5:a1:33:63:01:2e:da:58:73:43:68:77
Signer

.text
Size: 38KB - Virtual size: 37KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 21KB - Virtual size: 32KB

.data3
Size: 40KB - Virtual size: 39KB

.data1
Size: 39KB - Virtual size: 39KB

.data2
Size: 36KB - Virtual size: 36KB

.rsrc
Size: 108KB - Virtual size: 107KB

.reloc
Size: 1KB - Virtual size: 1KB