f08e9a9d5c9e1218270f7488ce1629cc_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f08e9a9d5c9e1218270f7488ce1629cc_JaffaCakes118
Size

315KB
MD5

f08e9a9d5c9e1218270f7488ce1629cc
SHA1

e0aba5d7a421fb00c8ea6730a599482c70366d06
SHA256

8975da9df6b454b0d0eee85f1c4ff70e3d4e3ec6a32467430e6fec0ef9ce0998
SHA512

ca4a57eee9b21787ab03e05b38edf551ad182de53d9e66ba4fe3ca9c1685e4421e3c00d45ace4e802f74dd06e2cc510645e1ec2076dd3627f0068aca6c870fdc
SSDEEP

6144:+D0cTSnzQPSqzXX5ydn3nozW5TFYkI4uLZMGLv+xxxxxxxxxxxxxxxxngxxxxxxn:6tTSzQPRHodn34y3IbnLGxxxxxxxxxxq

Score

1^/10

Malware Config

Signatures

Files

f08e9a9d5c9e1218270f7488ce1629cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d5c789d4e602030ee7b0f0ab6b74258f

Code Sign

01:64:9b:a0:74:6d:08:53:b3:3d:20:74:9e:05:b0:30
Certificate

Issuer

CN=CrZvMFNeGbO2FBAdLGSwKOYytbbzrF

Not Before

02/05/2012, 06:07

Not After

31/12/2039, 23:59

Subject

CN=CrZvMFNeGbO2FBAdLGSwKOYytbbzrF

Extended Key Usages

ExtKeyUsageCodeSigning

2e:0b:8a:12:1b:cf:b0:29:62:76:83:32:a1:14:c2:c5:4e:4a:8c:55
Signer

Actual PE Digest

2e:0b:8a:12:1b:cf:b0:29:62:76:83:32:a1:14:c2:c5:4e:4a:8c:55

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
GetWindowsDirectoryW
lstrcatW
CreateFileW

user32

InvalidateRect
GetDC
ReleaseDC
BeginPaint
LoadCursorA
SetCursor
ShowCursor
EndPaint
PostQuitMessage
DefWindowProcA

gdi32

SetPixel
LineTo

advapi32

RegOpenKeyA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.z2
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.z3
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.z
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5c789d4e602030ee7b0f0ab6b74258f

Code Sign

01:64:9b:a0:74:6d:08:53:b3:3d:20:74:9e:05:b0:30Certificate

Extended Key Usages

2e:0b:8a:12:1b:cf:b0:29:62:76:83:32:a1:14:c2:c5:4e:4a:8c:55Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 2KB - Virtual size: 2KB

.z2 Size: 512B - Virtual size: 4B

.data Size: 1024B - Virtual size: 996B

.z3 Size: 512B - Virtual size: 4B

.z Size: 307KB - Virtual size: 307KB

.rsrc Size: 1024B - Virtual size: 968B

.reloc Size: 512B - Virtual size: 168B

01:64:9b:a0:74:6d:08:53:b3:3d:20:74:9e:05:b0:30
Certificate

2e:0b:8a:12:1b:cf:b0:29:62:76:83:32:a1:14:c2:c5:4e:4a:8c:55
Signer

.text
Size: 2KB - Virtual size: 2KB

.z2
Size: 512B - Virtual size: 4B

.data
Size: 1024B - Virtual size: 996B

.z3
Size: 512B - Virtual size: 4B

.z
Size: 307KB - Virtual size: 307KB

.rsrc
Size: 1024B - Virtual size: 968B

.reloc
Size: 512B - Virtual size: 168B