fc1509e971823d42ed587de844d56795_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fc1509e971823d42ed587de844d56795_JaffaCakes118
Size

119KB
MD5

fc1509e971823d42ed587de844d56795
SHA1

c0385f87d0d01b9581b8d299dc915b1d373ba34f
SHA256

c48de5b61a93d5316312951dd319ec74195f73d579cfb59d23a5fc2e774846cb
SHA512

3308b96c2c8fc11572af58c358a965367fa8343671d7f035fc35a7530df3b1bba53c492e6b95eceba582252bd386d5c12fbb38543f7315070ad1d1a108637c84
SSDEEP

1536:Hl8zbfIR7taQdTXuvxlDSOg/Tv3eHKCEijn3iS7xcPm5qitGt66B7nsaLGdhhhZG:OOlYlDSOuTfiLX7OPmJGt667nwjez

Score

1^/10

Malware Config

Signatures

Files

fc1509e971823d42ed587de844d56795_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c96ca797639c33294bbf70b0f9d69718

Code Sign

19:ac:6a:9a:0f:b2:b2:8a:48:e9:65:e0:f4:c0:46:a1
Certificate

Issuer

CN=4OWe

Not Before

21-05-2012 08:21

Not After

31-12-2039 23:59

Subject

CN=4OWe

Extended Key Usages

ExtKeyUsageCodeSigning

f5:cf:68:20:9d:cf:87:53:26:9b:0b:85:93:e4:a5:9c:8a:62:1a:b8
Signer

Actual PE Digest

f5:cf:68:20:9d:cf:87:53:26:9b:0b:85:93:e4:a5:9c:8a:62:1a:b8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
lstrcatW
CreateFileW
CloseHandle
VirtualAllocEx
ReadFile
GetModuleHandleW
GetProcAddress

gdi32

GetStockObject

advapi32

RegCloseKey

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c96ca797639c33294bbf70b0f9d69718

Code Sign

19:ac:6a:9a:0f:b2:b2:8a:48:e9:65:e0:f4:c0:46:a1Certificate

Extended Key Usages

f5:cf:68:20:9d:cf:87:53:26:9b:0b:85:93:e4:a5:9c:8a:62:1a:b8Signer

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

Sections

.text Size: 14KB - Virtual size: 13KB

.data Size: 97KB - Virtual size: 97KB

.data4 Size: 1024B - Virtual size: 1000B

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 1024B - Virtual size: 1000B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 172B

19:ac:6a:9a:0f:b2:b2:8a:48:e9:65:e0:f4:c0:46:a1
Certificate

f5:cf:68:20:9d:cf:87:53:26:9b:0b:85:93:e4:a5:9c:8a:62:1a:b8
Signer

.text
Size: 14KB - Virtual size: 13KB

.data
Size: 97KB - Virtual size: 97KB

.data4
Size: 1024B - Virtual size: 1000B

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 172B