0332b851de5308648ae96c3530e66c24_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0332b851de5308648ae96c3530e66c24_JaffaCakes118
Size

180KB
MD5

0332b851de5308648ae96c3530e66c24
SHA1

c237ed124348d85b35c7500801bf394b1278d8ab
SHA256

734a5169938197b71dc2f9a6da96b00e9dbab707d2cc9cb50eabf144b14b70f9
SHA512

a709a647ea06fec3e94f6ca099151e7aaa253a5a2635df7226417afdff55839676d30615add59e53c0c4f1503068f27fc1175d093925df423ec7f895a0a46178
SSDEEP

3072:30uIfrokLg8fm2tVrTWPH38qeOFvUIgD+b4NSmT:UrokPusTWPHReOSeb4NSmT

Score

1^/10

Malware Config

Signatures

Files

0332b851de5308648ae96c3530e66c24_JaffaCakes118
.dll windows:5 windows x86 arch:x86

a007c41c536b42e07e11cf04a097f223

Code Sign

15:e7:c2:7f:1b:86:c5:44:be:cd:e5:1e:e1:74:a9:7b
Certificate

Issuer

CN=939515!7!5!166963!777951584!!69844863351258994876!72793536!1!373!741235974689!!41617791!13243536184995692232!448165292!!777!429947551822674!28!283257472127!853591313243!!52228267655917386!553363376778

Not Before

13/11/2012, 05:14

Not After

31/12/2039, 23:59

Subject

CN=939515!7!5!166963!777951584!!69844863351258994876!72793536!1!373!741235974689!!41617791!13243536184995692232!448165292!!777!429947551822674!28!283257472127!853591313243!!52228267655917386!553363376778

Extended Key Usages

ExtKeyUsageCodeSigning

89:ed:b7:c6:bd:4e:c6:4e:e7:78:4f:08:aa:4f:95:5e:df:cc:7c:55
Signer

Actual PE Digest

89:ed:b7:c6:bd:4e:c6:4e:e7:78:4f:08:aa:4f:95:5e:df:cc:7c:55

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
CreateFileW
LoadLibraryW

user32

LoadIconA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegOpenKeyA
RegOpenKeyW

ole32

PropVariantCopy
GetHGlobalFromStream

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 498B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a007c41c536b42e07e11cf04a097f223

Code Sign

15:e7:c2:7f:1b:86:c5:44:be:cd:e5:1e:e1:74:a9:7bCertificate

Extended Key Usages

89:ed:b7:c6:bd:4e:c6:4e:e7:78:4f:08:aa:4f:95:5e:df:cc:7c:55Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

ole32

Sections

.text Size: 2KB - Virtual size: 2KB

.text Size: 59KB - Virtual size: 58KB

.rdata Size: 512B - Virtual size: 498B

.data Size: 114KB - Virtual size: 113KB

.reloc Size: 1024B - Virtual size: 612B

15:e7:c2:7f:1b:86:c5:44:be:cd:e5:1e:e1:74:a9:7b
Certificate

89:ed:b7:c6:bd:4e:c6:4e:e7:78:4f:08:aa:4f:95:5e:df:cc:7c:55
Signer

.text
Size: 2KB - Virtual size: 2KB

.text
Size: 59KB - Virtual size: 58KB

.rdata
Size: 512B - Virtual size: 498B

.data
Size: 114KB - Virtual size: 113KB

.reloc
Size: 1024B - Virtual size: 612B