073ab07400b52592e2367a4d3f3adb60_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

073ab07400b52592e2367a4d3f3adb60_JaffaCakes118
Size

272KB
MD5

073ab07400b52592e2367a4d3f3adb60
SHA1

2aaa1b86cdf25234457afb0571eff395064d11c2
SHA256

98aac85e0a22ae0ff948bbc8da8013af9e96e9ff2d75d468d981d789e201136e
SHA512

dbb105d0beae01acedad96ddc7d727ba62ddf830a157a902bdb60278f41ad77e47e7c759b13b6ae7b88b3cdf9f61830eca4887d6f1ebdedcbb6787313e40791a
SSDEEP

6144:vs5HE8bScYI4UHjerdJ4cLp9hyO+hJi9Y+MBpXpWhA:05HXblRKrd2YqO++99u

Score

1^/10

Malware Config

Signatures

Files

073ab07400b52592e2367a4d3f3adb60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8d2352b2282b82f1ad11c33450a4e172

Code Sign

74:c0:a1:4e:5c:0a:de:b5:45:af:39:d8:0a:b3:38:06
Certificate

Issuer

CN=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

Not Before

23/10/2012, 17:23

Not After

31/12/2039, 23:59

Subject

CN=dOWrTDHg4BElvke3RLTwe5a588w7Z9nEkd6qb9TaIIYlLpEXVWIAfAPf3thkTgOekPPM3OOgGp9YAk7eApAGqANXLXQqlmqSoreyBBSB1GrD6TlR5DiMe5srXQJ8jOofPgIzBtnvY4zt6Z18NGZzJ138tUPZoYPfb7estrwBXADp2wGBl6izFsINgsrmThM51i1AhyrNxO9a2oP7oWb4rsyutlhkK99fcEL9IT8foS2eOzNNQR2767xwoWtKx5KuDBB6cyyrqqBSQ3U3K1EzmwxtsaxlwylRt3ZaKGw5DBBccQkzh3g5zQmgiqrvA7yHWpTR5sNed9aYz1akLcs1LiG2EItvklVBwHBwv41bvgOSoDoxJchAC47eryqlUPVtJqPc4JJuZJwiFPVMPj8LuobzJVqNgcTtmAHKpKq4lREo9JBPSnRjkAg6Lr3tR783gNMQQnq1mtV99x7NQHHJNVH3VbfGWhLVvaZSmX3NZUziGq63QbindLI2LKoBjpU9ihG6AQr8n67nsE5fcbHkvusRWkg8ufxZYlBrOqIYLqxHLvvkjEnsktWIlB2WCBx363UHX8QCBSglBgIvM4brUb8YYMkzvhHajBcrFoJCuU3bBgWhnpnHe4RmZC6eD8KtrMqYaHcNaz7R4RoqYcDtOCUOIqMY72hquRWqnzViwo3PWt41Gu4KXnVCEXbEJTNGBHzFQxytCrSiQwXoHR8kwSujpCuQUFJg4BvoPbB3Fm1f2sXapsJK5K4HMglVLkqpkuj4c8vX2gisqLQgkUcoOB3SIhM62R7F1K1TtYzsgOVuAYiQaqcnC5IfkCeh7lTSTm2VRr531gzHLETpLFQA1RitRLvd4MSaSL9Webay8igbQmbG7UGK9HPtKHSpBkYS5YCx3WR4BdrQoHvHoWDjSiouyY1a764IHz45vvbUBNXozmdMS32xHrQ31EWxCfTC9AwGpEVMqn6ggYwv64AsKX3TZi9oOW9PWDqifcVBxOwHYiyLCmtSQHG9z4un2tpRQQCC81PyxwiKS1mHhQfpqvr8TCfSg2avFTn9RYf9eoTdNVPLYWPrBiOtm778bVMQtXl9S1D9wTeFePQEPCC6aZg5sja55vzeoNzEh4qCw1zvhzan6mnmxA9bQqUwV4JjLEzwP8TTsgCQLZpeacgUN4IenffXm1pZ6jclVdizJGvFa1bKBGShGr9XZ7tKELzu15JwElHAVSIDwxTM9UcKCNtsQQkYJK9ikQSeJCa5IWbiExZtEuDnCdI1fPUxdsZaYYJpx8Ax1wdRX1HdaAXZqNKeCXL7jnO86nNP62PFNLyswWfGSQqhnJlZyHO7W3hxVwYZ8tDxhqlS5rGR8wBAvbctQ1pNG3TZUmBcYFEqNG7LZx4Zqlx8vnV7ooiaKWanDpnwDQpUPmNvlmfCrzDTFx2ChQB1ZqqROHrPLhoT3INiO44xW2JC3YV1HZTUX7UVmPlMHfXteAQ5KPeQX36PeZVA5SbePGQhjSZMp5p8nl8CcRnUAukQyUhUWaM5rTiURvL3w8SwzRcsNo3p7KvMX86PYYuojvdboQpykMuF7A2RTGDgYM6v52qt42uRyhwBqC56LtdQps2Ws4xGL3VFa3dgcwoX2215C2lcqDWB5XZA9QYbgviJaFiSwe9YbCnJNRbcAKwMQ87qeq7wlHSSEmskpqdV8VeYYoWc9mCtDuYSF91M5HJaRGlOiTmEES6xhrt7GYR7t7Dc5tDjH5okIbwVO2NJcoonZnTCqcNlADumIQRIzXHXJrutMGbAQsrLB4R9eBP9ldl7vMtUfZYo96Cx9gwmm4tfHUlXEQjLgts42La6omWLONcwZGfZ8gEF4TL4SBtH3DrwvnwHSLIZgeq4Btcfe6Z7BtVgLytMvsmCOb3wGsNKF6o8nACAmHuYpF59Osm5EbEfxN9yYd7wQ97WSzcmTcXVIZP3c45XDCb6QR875lZyjbv1QtVASIdWUyf9Iax6L6dCC6eOsEdRdZo7bUlaYuSeyVIlRAtnvto5l9yvJyRjkqukT1gHzIyklg8mLbz3s9NudN9mGVws8mrYdqYDCEIZ9dIFcQrzp2WF3NVOhd9GJFMKtlc9MBMlXZaxCvyJizGdjXLzzl6aVkWwcsYeoR1HZjv375kAcMksb7oEQP9P7hjt24PCoNDKyqfZsA2tmazAp7tkvItpow88OUFTqNKn99e122UZcKvwuRz97xEou6xcwlMmKfoMnMMtWr44faFXuj9XnoF5O3DJibT7jArt5bzATTxQfsWrdnATcSVwqto5pN84HkLdcJGhhveO2jHd25anzbfA1vFNk71QcV52QnEi7qZHETDk5q44JVMSXhiNDztVEW2ghvn96NAxiTTC2soUZocOhZWe78RyEXbvV9aaBPDCgA2Jkh9dShuBDQdyFiUHqzWFoMKoBLGx6GY4YZet2Q5bp7Ctm7McOoITosgHMReapw6MGLrvhWOlx3z1r72zo5KGOKdKtpCD2U9RPKwpzTVAGYosiqCeileJILzXCJ8nVej4qa5x4z4faejmrEVgpTc4i7GxQcV7cl9R7eFz1mgpVbsBAWJCcuGXUZisub7O8HECffHrSbZXBfSiA2dYQVy275yvr7GL9fcpMvxmgw8zrPvQt7WQ91B7xC4elqwxQtz6okqOSnVFnrdXnUXsyBxm2lKVpCsWYnZkl6vCGf4t1xICDKDQeAYbAy2LAda7qw4xBbROHcCYyFJ5IqMRUQrgk6FBqIiqgZMWL3sJbO5ZVoNRihC74lkCzhR7aJmAGoAy77a2ufm5FjoO7cLXL4YvK2eLERMw5Qh8yTLA96Jy11U18zgAMYDsvIJOtKTvX47eFUWARzUAMbDQtlwVuarjAlOfM4X31eHcGHjvuo24xuLYoZoJYEqbVliRsu8W5469vQl6ZLBFrEpmix8uWyxrBJngZLqj9RLYEZsozvxSkrydKtnwL1FMQ5GNxFQsmpxolKYHwTbXGA82

Extended Key Usages

ExtKeyUsageCodeSigning

68:a8:c3:60:a8:4e:d9:19:04:eb:ac:cb:d1:b5:9c:6e:45:94:13:9a
Signer

Actual PE Digest

68:a8:c3:60:a8:4e:d9:19:04:eb:ac:cb:d1:b5:9c:6e:45:94:13:9a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
GetWindowsDirectoryW
LoadLibraryA
GetProcAddress

msvcrt

memcpy
__setusermatherr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_except_handler3
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

advapi32

RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8d2352b2282b82f1ad11c33450a4e172

Code Sign

74:c0:a1:4e:5c:0a:de:b5:45:af:39:d8:0a:b3:38:06Certificate

Extended Key Usages

68:a8:c3:60:a8:4e:d9:19:04:eb:ac:cb:d1:b5:9c:6e:45:94:13:9aSigner

Headers

File Characteristics

Imports

kernel32

msvcrt

advapi32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata4 Size: 1024B - Virtual size: 1000B

.rdata3 Size: 1024B - Virtual size: 1000B

.rdata2 Size: 1024B - Virtual size: 1000B

.rdata Size: 243KB - Virtual size: 243KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 196B

74:c0:a1:4e:5c:0a:de:b5:45:af:39:d8:0a:b3:38:06
Certificate

68:a8:c3:60:a8:4e:d9:19:04:eb:ac:cb:d1:b5:9c:6e:45:94:13:9a
Signer

.text
Size: 2KB - Virtual size: 2KB

.rdata4
Size: 1024B - Virtual size: 1000B

.rdata3
Size: 1024B - Virtual size: 1000B

.rdata2
Size: 1024B - Virtual size: 1000B

.rdata
Size: 243KB - Virtual size: 243KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 196B