ea829c427915ddadcdc98b591f5bb953_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ea829c427915ddadcdc98b591f5bb953_JaffaCakes118
Size

389KB
MD5

ea829c427915ddadcdc98b591f5bb953
SHA1

c1eee86318339cabb2342e32add85cdec20fcf26
SHA256

48a9857970747da03168b43c0913a2d65e6b6ed4419c6a0336beafb4f2b0bfd8
SHA512

1399d57e92ff42330c4096ecc3d4a7953e0f38075a992afd6ba42480f16ac3e6da868bc524f8bb4e7d436e35f6d1c44dbd6f925177288ba70ac74de3eb1c56db
SSDEEP

12288:bCBigWIseC7QUyxBUeMaya/r2/XqCF7IYveKnM:bCuI7C8Uy/UWCXqCF7IYRM

Score

1^/10

Malware Config

Signatures

Files

ea829c427915ddadcdc98b591f5bb953_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a10680274be6655ad77f994239d9ce7f

Code Sign

07:84:39:a4:37:39:c3:97:40:52:3c:6d:a0:47:71:9e
Certificate

Issuer

CN=Root Agency

Not Before

02/11/2011, 13:59

Not After

21/12/2024, 22:00

Subject

CN=Joe's-Software-Emporium

Extended Key Usages

ExtKeyUsageCodeSigning

17:0d:54:f2:4c:e7:26:3b:fc:b1:c4:c1:23:79:81:b9:5b:91:0c:49
Signer

Actual PE Digest

17:0d:54:f2:4c:e7:26:3b:fc:b1:c4:c1:23:79:81:b9:5b:91:0c:49

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glIndexd
glColor4i
glRotatef
glMapGrid2d
glEvalCoord1d
glScissor
glColor4ubv
glRasterPos3sv
glColor4bv
glVertex2d
glFogf

glu32

gluTessBeginContour
gluPwlCurve
gluBeginCurve
gluTessCallback
gluBeginSurface
gluTessEndPolygon
gluBeginTrim
gluCylinder
gluPerspective

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit
_XcptFilter
_exit
_acmdln

kernel32

ReleaseMutex
VirtualQueryEx
LocalLock
EnterCriticalSection
IsBadStringPtrA
VirtualAlloc
ExitProcess
GetModuleHandleA
GetProcAddress
GetStartupInfoA
IsBadCodePtr
VirtualProtect
GlobalAlloc
ResetEvent
GetDateFormatA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 361KB - Virtual size: 445KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a10680274be6655ad77f994239d9ce7f

Code Sign

07:84:39:a4:37:39:c3:97:40:52:3c:6d:a0:47:71:9eCertificate

Extended Key Usages

17:0d:54:f2:4c:e7:26:3b:fc:b1:c4:c1:23:79:81:b9:5b:91:0c:49Signer

Headers

File Characteristics

Imports

opengl32

glu32

msvcrt

kernel32

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 361KB - Virtual size: 445KB

.rsrc Size: 5KB - Virtual size: 5KB

07:84:39:a4:37:39:c3:97:40:52:3c:6d:a0:47:71:9e
Certificate

17:0d:54:f2:4c:e7:26:3b:fc:b1:c4:c1:23:79:81:b9:5b:91:0c:49
Signer

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 361KB - Virtual size: 445KB

.rsrc
Size: 5KB - Virtual size: 5KB