08b8f5eedc5e30aba09deeb606d939d5_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

08b8f5eedc5e30aba09deeb606d939d5_JaffaCakes118
Size

232KB
MD5

08b8f5eedc5e30aba09deeb606d939d5
SHA1

11aba7a2b6117e0b772c97098cb8f8e7c54f20c6
SHA256

a325bd8fc2ed6867826d1b4a6a19862a614f8db4bc394eaaef2c7583307e6b50
SHA512

200e82800b30bb5d9c9fa4bd683410b872ddc4d376e2111d56975fd950be8432681b07607939b00dfa9c47144155f75f670f2cc79c0cad6c14024158cdfc1cce
SSDEEP

3072:1UyjAihAFKqKizXo6VrBqqk14JrHFsRqJ23qzbFJzwpVikYSjmEYP6illW8RnNHu:yZTcPiGCrHWqQqzjwPVmEVgVnNdU

Score

1^/10

Malware Config

Signatures

Files

08b8f5eedc5e30aba09deeb606d939d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9b5bfa0062b06678d85027e0b950f27

Code Sign

4f:20:58:14:5f:55:8f:b9:4e:2b:23:7b:f1:d9:51:c7
Certificate

Issuer

CN=dsfbyhebrt

Not Before

29/02/2012, 09:29

Not After

31/12/2039, 23:59

Subject

CN=dsfbyhebrt

Extended Key Usages

ExtKeyUsageCodeSigning

bf:89:7c:b8:48:32:e3:e8:ac:ec:33:bf:d7:a6:63:41:19:bb:96:2d
Signer

Actual PE Digest

bf:89:7c:b8:48:32:e3:e8:ac:ec:33:bf:d7:a6:63:41:19:bb:96:2d

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
VirtualAlloc
InterlockedCompareExchange
AddAtomA

advapi32

RegOpenKeyA

shlwapi

PathUnmakeSystemFolderW
SHRegQueryUSValueA
PathCompactPathA
ColorRGBToHLS
PathFindSuffixArrayW
SHSetValueW
UrlIsNoHistoryA
StrCmpNA
StrTrimA
PathSkipRootA
PathIsURLA
StrCmpNIA
PathIsLFNFileSpecW
PathIsUNCServerShareW
PathFileExistsA
PathIsPrefixA
PathRemoveArgsA
PathFindNextComponentA
SHRegCreateUSKeyA
StrCatBuffA
IntlStrEqWorkerW
SHCopyKeyA
PathCombineA
SHQueryInfoKeyA
UrlEscapeA
SHQueryInfoKeyW
UrlGetPartW
SHRegDeleteUSValueW
SHCreateStreamOnFileW
StrRetToStrW
StrFormatKBSizeA
PathIsUNCServerA

Sections

.textFF4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textFF3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9b5bfa0062b06678d85027e0b950f27

Code Sign

4f:20:58:14:5f:55:8f:b9:4e:2b:23:7b:f1:d9:51:c7Certificate

Extended Key Usages

bf:89:7c:b8:48:32:e3:e8:ac:ec:33:bf:d7:a6:63:41:19:bb:96:2dSigner

Headers

File Characteristics

Imports

kernel32

advapi32

shlwapi

Sections

.textFF4 Size: 1024B - Virtual size: 1000B

.textFF3 Size: 1024B - Virtual size: 1000B

.text Size: 213KB - Virtual size: 213KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 13KB - Virtual size: 12KB

.reloc Size: 512B - Virtual size: 328B

4f:20:58:14:5f:55:8f:b9:4e:2b:23:7b:f1:d9:51:c7
Certificate

bf:89:7c:b8:48:32:e3:e8:ac:ec:33:bf:d7:a6:63:41:19:bb:96:2d
Signer

.textFF4
Size: 1024B - Virtual size: 1000B

.textFF3
Size: 1024B - Virtual size: 1000B

.text
Size: 213KB - Virtual size: 213KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 13KB - Virtual size: 12KB

.reloc
Size: 512B - Virtual size: 328B