ff67a694376bb24ad05e3aab8b342042_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ff67a694376bb24ad05e3aab8b342042_JaffaCakes118
Size

417KB
MD5

ff67a694376bb24ad05e3aab8b342042
SHA1

771f8ce408d3d604057475d4b82ea29eddc872f1
SHA256

6d2e20cde5ac9e7ac8872e2ff5009dab6ad3b17d468635d4de3142c498c982bb
SHA512

21760ab93ff4fced6800b3be50b59b6d65182fb1b258da9a30a14c5e984a1013cebf5216689d15b48fb63e2740096c5c71430764850ea92c34085f93d5709ab8
SSDEEP

12288:2hCya0aQPjZMxqrHMmUTQOEgFwyefuTaCeE:uCCtMKMDfqGaCeE

Score

1^/10

Malware Config

Signatures

Files

ff67a694376bb24ad05e3aab8b342042_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea94e348b5695d530112fec681d9a35b

Code Sign

7e:e1:15:24:33:38:1c:47:b3:3d:07:4e:3d:d3:47:13
Certificate

Issuer

CN=Root Agency

Not Before

08-11-2011 14:31

Not After

28-10-2024 22:00

Subject

CN=TQX

Extended Key Usages

ExtKeyUsageCodeSigning

7e:d4:3b:aa:1d:61:f4:c3:c8:04:37:03:af:93:33:4f:78:7c:30:a7
Signer

Actual PE Digest

7e:d4:3b:aa:1d:61:f4:c3:c8:04:37:03:af:93:33:4f:78:7c:30:a7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glEvalCoord1fv
glPrioritizeTextures
glGetFloatv
glColor3d
glLineStipple
glClear
glColor3uiv
glRasterPos4d
glPixelMapusv
glAlphaFunc
glGetString

glu32

gluBuild1DMipmaps
gluBuild2DMipmaps

ole32

OleGetAutoConvert
CoFreeUnusedLibraries
CreatePointerMoniker
CoRevokeMallocSpy
CoUnmarshalInterface
CoGetClassObject
ProgIDFromCLSID
CoCreateInstance
CoIsOle1Class

oledlg

ord6

comctl32

ord3
ord6
CreateToolbarEx
UninitializeFlatSB
ord15
ord14

urlmon

CreateAsyncBindCtx

shlwapi

StrCSpnA
StrToIntA
StrChrA
StrCSpnW

msvcrt

__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
_controlfp

kernel32

ReleaseMutex
VirtualProtectEx
GetOverlappedResult
LocalReAlloc
GetStartupInfoA
ExitProcess
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
GetCPInfo
SetLocaleInfoA
HeapDestroy
GetTimeFormatA
GetOEMCP

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tdh
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uastab
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea94e348b5695d530112fec681d9a35b

Code Sign

7e:e1:15:24:33:38:1c:47:b3:3d:07:4e:3d:d3:47:13Certificate

Extended Key Usages

7e:d4:3b:aa:1d:61:f4:c3:c8:04:37:03:af:93:33:4f:78:7c:30:a7Signer

Headers

File Characteristics

Imports

opengl32

glu32

ole32

oledlg

comctl32

urlmon

shlwapi

msvcrt

kernel32

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 84KB

tdh Size: 294KB - Virtual size: 293KB

uastab Size: 98KB - Virtual size: 98KB

.tls Size: 512B - Virtual size: 4B

.rsrc Size: 5KB - Virtual size: 5KB

7e:e1:15:24:33:38:1c:47:b3:3d:07:4e:3d:d3:47:13
Certificate

7e:d4:3b:aa:1d:61:f4:c3:c8:04:37:03:af:93:33:4f:78:7c:30:a7
Signer

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 84KB

tdh
Size: 294KB - Virtual size: 293KB

uastab
Size: 98KB - Virtual size: 98KB

.tls
Size: 512B - Virtual size: 4B

.rsrc
Size: 5KB - Virtual size: 5KB