fc8145b21d175ba717e837fd3eee102c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fc8145b21d175ba717e837fd3eee102c_JaffaCakes118
Size

1.3MB
MD5

fc8145b21d175ba717e837fd3eee102c
SHA1

166037328c74cd95bf3512454938803a142a5cde
SHA256

ac00db38736f8b064f0d878eea44c13923475186b5135fee2fd6f92522c0699f
SHA512

0b8525cdcb2778e294b11ec56a23500357b54b630555569edc3bc0451146524ffa17aa6598532cbbb418018af0ab7b9b3675425a015ba90ac611e01feb2d3723
SSDEEP

12288:BBpIwAR/kkMD/thCtMybHDYmCTO8f9QdQ0qqA28tHbgPXv5uT8rsOJLnM27GZep:B7Iw8cjhSHDY3XQ2WzC7guYrNJDM26s

Score

1^/10

Malware Config

Signatures

Files

fc8145b21d175ba717e837fd3eee102c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cacca49eae0d24330245f69b3fa839fe

Code Sign

6f:d9:9c:65:c8:d5:3a:62:be:f9:da:40:5e:a0:a0:1f
Certificate

Issuer

CN=DUDPNMWO

Not Before

04-12-2018 11:14

Not After

31-12-2039 23:59

Subject

CN=DUDPNMWO

Extended Key Usages

ExtKeyUsageCodeSigning

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

9c:de:6e:06:60:70:db:38:50:e8:8d:e6:f3:fc:90:75:87:33:c1:2e:c8:59:c3:38:5b:0a:77:31:7a:68:a8:8d
Signer

Actual PE Digest

9c:de:6e:06:60:70:db:38:50:e8:8d:e6:f3:fc:90:75:87:33:c1:2e:c8:59:c3:38:5b:0a:77:31:7a:68:a8:8d

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetProcAddress
VirtualAllocEx
GetModuleHandleA

user32

GetSystemMetrics
VkKeyScanA
CreatePopupMenu
AnyPopup
CloseDesktop
DrawMenuBar
DestroyCursor
GetLastActivePopup
GetInputState

gdi32

GdiGetBatchLimit
CreatePatternBrush
GetDCPenColor
GetLayout
GetBkColor
GetEnhMetaFileW

advapi32

RegOpenKeyExW

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 689KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cacca49eae0d24330245f69b3fa839fe

Code Sign

6f:d9:9c:65:c8:d5:3a:62:be:f9:da:40:5e:a0:a0:1fCertificate

Extended Key Usages

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

9c:de:6e:06:60:70:db:38:50:e8:8d:e6:f3:fc:90:75:87:33:c1:2e:c8:59:c3:38:5b:0a:77:31:7a:68:a8:8dSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 1.3MB - Virtual size: 1.3MB

.data Size: 21KB - Virtual size: 20KB

.rsrc Size: 1KB - Virtual size: 689KB

6f:d9:9c:65:c8:d5:3a:62:be:f9:da:40:5e:a0:a0:1f
Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

9c:de:6e:06:60:70:db:38:50:e8:8d:e6:f3:fc:90:75:87:33:c1:2e:c8:59:c3:38:5b:0a:77:31:7a:68:a8:8d
Signer

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 21KB - Virtual size: 20KB

.rsrc
Size: 1KB - Virtual size: 689KB