01641b45d57d3f783049c905e1dad3fa_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

01641b45d57d3f783049c905e1dad3fa_JaffaCakes118
Size

270KB
MD5

01641b45d57d3f783049c905e1dad3fa
SHA1

173a87b5798d011ecb8bb1614756401b85feb79f
SHA256

e6ae41f2e85a69e43794134635c8fa58dfbe10caf832c802950d804f4bc3134e
SHA512

30166fcd350b4fd8e0bb9468b4711448ae1fb992109c974025be5e995d38976aa641706a047b1a11ff3549fdcbfdc5c4c85777d33573767bc3401fd268e57f27
SSDEEP

6144:vg9i8921cdzRT0N1OfIy5P1R1FUb9Yl5TSHEvkSVH6qIceYsCK3C6:Y93921cdRY1CtVVTo6fH624CC

Score

1^/10

Malware Config

Signatures

Files

01641b45d57d3f783049c905e1dad3fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6b9626a3d7cd225a5a53bbea77d9eb2

Code Sign

6c:11:47:2e:00:cf:a0:6c:b3:22:e2:36:f7:b5:ad:21
Certificate

Issuer

CN=j99zWTOf8FdlY6t

Not Before

05-04-2012 07:07

Not After

31-12-2039 23:59

Subject

CN=j99zWTOf8FdlY6t

Extended Key Usages

ExtKeyUsageCodeSigning

cc:44:14:e7:bb:01:a1:a1:30:8f:83:32:b9:13:2e:df:78:d8:33:26
Signer

Actual PE Digest

cc:44:14:e7:bb:01:a1:a1:30:8f:83:32:b9:13:2e:df:78:d8:33:26

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetWindowsDirectoryA
lstrcatA
GetModuleHandleA
GetProcAddress

gdi32

GetStockObject

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 261KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l7
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l6
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6b9626a3d7cd225a5a53bbea77d9eb2

Code Sign

6c:11:47:2e:00:cf:a0:6c:b3:22:e2:36:f7:b5:ad:21Certificate

Extended Key Usages

cc:44:14:e7:bb:01:a1:a1:30:8f:83:32:b9:13:2e:df:78:d8:33:26Signer

Headers

File Characteristics

Imports

kernel32

gdi32

msvcrt

advapi32

Sections

.text Size: 261KB - Virtual size: 260KB

.data Size: 1024B - Virtual size: 1KB

.l7 Size: 1024B - Virtual size: 1000B

.l6 Size: 1024B - Virtual size: 1000B

.l5 Size: 1024B - Virtual size: 1000B

.l4 Size: 1024B - Virtual size: 1000B

.l3 Size: 1024B - Virtual size: 1000B

.l2 Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 108B

6c:11:47:2e:00:cf:a0:6c:b3:22:e2:36:f7:b5:ad:21
Certificate

cc:44:14:e7:bb:01:a1:a1:30:8f:83:32:b9:13:2e:df:78:d8:33:26
Signer

.text
Size: 261KB - Virtual size: 260KB

.data
Size: 1024B - Virtual size: 1KB

.l7
Size: 1024B - Virtual size: 1000B

.l6
Size: 1024B - Virtual size: 1000B

.l5
Size: 1024B - Virtual size: 1000B

.l4
Size: 1024B - Virtual size: 1000B

.l3
Size: 1024B - Virtual size: 1000B

.l2
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 108B