ebfd831769ff815fb051e1b2d8f610a2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ebfd831769ff815fb051e1b2d8f610a2_JaffaCakes118
Size

415KB
MD5

ebfd831769ff815fb051e1b2d8f610a2
SHA1

e9bfc2061e1afbb4e44edf69127c70e2d65249e7
SHA256

47d93d92a2ec2c7f05013955dbc37a3ae7f4598330c7ae01403f4b93e81edfec
SHA512

a264f79a44bed8f5aad8b0f92a00c18183bfccf200e033839c642794934d6a429aa35420acc21432b51cd3276364da443104b4be9d4c67114a3e40df11c9b98a
SSDEEP

12288:9CndfiLZEOo8j7OzOZTvQq2jrfrUc5Mz8z:9ciL7/0qaPUUM4z

Score

1^/10

Malware Config

Signatures

Files

ebfd831769ff815fb051e1b2d8f610a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68edd79a778bd1a56347279f183f8282

Code Sign

0d:bf:15:6c:14:f8:82:ae:4f:40:4c:61:3f:01:08:a5
Certificate

Issuer

CN=snovbpxmbxb

Not Before

14/11/2011, 10:56

Not After

31/12/2039, 23:59

Subject

CN=Loren Com

53:3e:cf:49:6d:5e:8a:da:50:7f:8a:b3:f7:fd:de:01:3e:c8:43:8c
Signer

Actual PE Digest

53:3e:cf:49:6d:5e:8a:da:50:7f:8a:b3:f7:fd:de:01:3e:c8:43:8c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
GetDesktopWindow
ReleaseDC

ole32

OleDraw

oledlg

ord4

gdi32

SetBkColor
SetTextColor

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__setusermatherr

kernel32

GetModuleHandleA
ExitProcess
GetSystemDefaultLCID
OpenMutexA
GetStartupInfoA
GetUserDefaultLangID
GetProcAddress
EnterCriticalSection
WideCharToMultiByte
LeaveCriticalSection
LocalSize
GetProcessHeap
GetOEMCP
GetStringTypeW

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 277KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

saiyoj
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

68edd79a778bd1a56347279f183f8282

Code Sign

0d:bf:15:6c:14:f8:82:ae:4f:40:4c:61:3f:01:08:a5Certificate

53:3e:cf:49:6d:5e:8a:da:50:7f:8a:b3:f7:fd:de:01:3e:c8:43:8cSigner

Headers

File Characteristics

Imports

user32

ole32

oledlg

gdi32

msvcrt

kernel32

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 277KB - Virtual size: 356KB

saiyoj Size: 117KB - Virtual size: 116KB

.rsrc Size: 5KB - Virtual size: 5KB

0d:bf:15:6c:14:f8:82:ae:4f:40:4c:61:3f:01:08:a5
Certificate

53:3e:cf:49:6d:5e:8a:da:50:7f:8a:b3:f7:fd:de:01:3e:c8:43:8c
Signer

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 277KB - Virtual size: 356KB

saiyoj
Size: 117KB - Virtual size: 116KB

.rsrc
Size: 5KB - Virtual size: 5KB