01501f0e4143a1f62d2240a0e26a91a0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

01501f0e4143a1f62d2240a0e26a91a0_JaffaCakes118
Size

173KB
MD5

01501f0e4143a1f62d2240a0e26a91a0
SHA1

25c8c801a94daafead949a7a2639969d15cd72d8
SHA256

09de2285f9ff6879fca44e8f93d93aeb99a7fdcb0935cb50c78a09acb9467d71
SHA512

f06077ccb7f45094c85fc42b9ce0dd924ac124fc2463f9a56488849482c4a744a97d6c3754d99f4040a42a1e3907a340af19e6ff2750b0c04fe4eb66b8fe47d5
SSDEEP

3072:dk8WmCK9ZspRJENxpi1cTaMGlo/TZHoJqhEBASunWC:BkIDmUZIfBunb

Score

1^/10

Malware Config

Signatures

Files

01501f0e4143a1f62d2240a0e26a91a0_JaffaCakes118
.dll windows:5 windows x86 arch:x86

1b26242716abd35c611d04059d1d3d2d

Code Sign

32:bf:48:49:9e:5b:eb:92:4e:89:ef:44:e4:3d:27:94
Certificate

Issuer

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

Not Before

27/11/2012, 05:26

Not After

31/12/2039, 23:59

Subject

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

Extended Key Usages

ExtKeyUsageCodeSigning

05:05:bd:c4:3f:8a:ac:98:0a:a5:32:e6:7d:f1:7e:95:43:f8:10:72
Signer

Actual PE Digest

05:05:bd:c4:3f:8a:ac:98:0a:a5:32:e6:7d:f1:7e:95:43:f8:10:72

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

advapi32

RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyA
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW

ole32

OleUninitialize

msvcrt

wcslen
vswprintf
_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_stricmp
exit
swprintf

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 650B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b26242716abd35c611d04059d1d3d2d

Code Sign

32:bf:48:49:9e:5b:eb:92:4e:89:ef:44:e4:3d:27:94Certificate

Extended Key Usages

05:05:bd:c4:3f:8a:ac:98:0a:a5:32:e6:7d:f1:7e:95:43:f8:10:72Signer

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

msvcrt

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 158KB - Virtual size: 158KB

.data Size: 512B - Virtual size: 200B

.rsrc Size: 1024B - Virtual size: 976B

.reloc Size: 1024B - Virtual size: 650B

32:bf:48:49:9e:5b:eb:92:4e:89:ef:44:e4:3d:27:94
Certificate

05:05:bd:c4:3f:8a:ac:98:0a:a5:32:e6:7d:f1:7e:95:43:f8:10:72
Signer

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 158KB - Virtual size: 158KB

.data
Size: 512B - Virtual size: 200B

.rsrc
Size: 1024B - Virtual size: 976B

.reloc
Size: 1024B - Virtual size: 650B