f04ec6e667f6d17982e78581278fe07d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f04ec6e667f6d17982e78581278fe07d_JaffaCakes118
Size

443KB
MD5

f04ec6e667f6d17982e78581278fe07d
SHA1

44c3305d81da83dbbfcccb8e6439eee9a4018fc1
SHA256

f7683ea4877f63ff1b9ee18231a80727997833c3ad11b4aee81968e42ea360b1
SHA512

a5ec66b5af99ac55416948883ded2531d400439f61162996df9da169cac12f9570f86efcc42a70d6ec9bdfa3ca01f6d59d6b4e0d1de30b05bb8875d419224d39
SSDEEP

12288:iH1JZu4b626NlBP44HuMCKVQrxnOGVoCLclbvsYb:iHrwSq44HfvQrjLL+wYb

Score

1^/10

Malware Config

Signatures

Files

f04ec6e667f6d17982e78581278fe07d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fad5976f2ecf42da9d5f1c3271894e8a

Code Sign

62:49:7e:bd:d3:42:cf:be:47:0a:df:5a:3e:7b:e3:d1
Certificate

Issuer

CN=zxvtjagvmnr

Not Before

18/01/2012, 15:45

Not After

31/12/2039, 23:59

Subject

CN=Okiuytr

d4:8a:9d:6b:91:73:19:e4:60:44:43:35:d4:7b:18:b9:37:ea:df:ea
Signer

Actual PE Digest

d4:8a:9d:6b:91:73:19:e4:60:44:43:35:d4:7b:18:b9:37:ea:df:ea

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

PropVariantCopy
CoFileTimeNow
CreateDataAdviseHolder
CoRegisterClassObject
StgCreatePropStg
OleRegEnumVerbs
ReadFmtUserTypeStg
OleGetClipboard
CoMarshalHresult
ReadClassStm
StgCreatePropSetStg
OleGetIconOfClass
OleDoAutoConvert
CoTaskMemFree
CoInitialize

kernel32

GetStringTypeW
GetStringTypeA
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetSystemDefaultLangID
IsValidLocale
LCMapStringA
IsValidCodePage
SetThreadLocale
GetNumberFormatA
VirtualLock
GetUserDefaultLangID
FoldStringA
GlobalMemoryStatus
VirtualProtect
GetStartupInfoA
GetModuleHandleA
GetProcAddress
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xaocp
Size: 402KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fad5976f2ecf42da9d5f1c3271894e8a

Code Sign

62:49:7e:bd:d3:42:cf:be:47:0a:df:5a:3e:7b:e3:d1Certificate

d4:8a:9d:6b:91:73:19:e4:60:44:43:35:d4:7b:18:b9:37:ea:df:eaSigner

Headers

File Characteristics

Imports

ole32

kernel32

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 3KB - Virtual size: 96KB

.xaocp Size: 402KB - Virtual size: 402KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 4KB

62:49:7e:bd:d3:42:cf:be:47:0a:df:5a:3e:7b:e3:d1
Certificate

d4:8a:9d:6b:91:73:19:e4:60:44:43:35:d4:7b:18:b9:37:ea:df:ea
Signer

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 3KB - Virtual size: 96KB

.xaocp
Size: 402KB - Virtual size: 402KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 4KB