0d102b54fe49c51b50c9671664fe39f4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0d102b54fe49c51b50c9671664fe39f4_JaffaCakes118
Size

158KB
MD5

0d102b54fe49c51b50c9671664fe39f4
SHA1

16c44970f7076e2cefd563ecf3b12b2f20522397
SHA256

14eb013322b7f84b761aa1c3e44b4dded79dcf0da513a8f209b3870719e4d1e9
SHA512

f196752779318d2ddfbfbbb89ca798a56a62fe317fcce10447707341ac0dc83b2d0b39c479638541fb35af7004cb057166cdff9bf7b37517818ea616a1e13311
SSDEEP

1536:xWFun2oky6PZByLBmtkwJhs2FaPNj/MqG7vZYM+Hyrbuw8bfA0B2BHinWQfh+3A1:J2FyNmtlJ9UNj0pe6bJOhB2An7xuYvZ9

Score

1^/10

Malware Config

Signatures

Files

0d102b54fe49c51b50c9671664fe39f4_JaffaCakes118
.dll windows:5 windows x86 arch:x86

27a3d73424e64c9f11a9f5c66f146847

Code Sign

77:85:24:19:97:c8:6c:7b:b3:46:0e:9c:a7:2f:67:64
Certificate

Issuer

CN=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

Not Before

08/11/2012, 07:27

Not After

31/12/2039, 23:59

Subject

CN=X3nfKysdYWu15tBeRkMNr46mFmskxRb5hlEfeGwdGZmevsxYLT63edkcO56OilfyCIjmHK3371KEXkOwS6MvkqglX9JgvvSeAynFbXFahkSSVTkpMrtwXjiIxxDZo4kFIy5N6iBZ1z82jJCeWLXYMfzjPxiUwsttrFMSfyO38D2KobUBKaciMoN87GirUTOh681BShQPiKgfSl4du1iopIodwNquYsBMUts9DOXT8lGbUaBHmZuKuVqC5ZAzxTDE3vXfyi2Q6bjPYiIOt2dnizBrKESFNNsDyjuc5ABhDhhX2gejNn2LrTjPptwmoyduoeeL5pSQ3XTTngCVjuG221yVOmVFnhI1rWsjNdIdxOErMn3vMd3KvK3WCADeaTs2snEEVeD7fIaYnnjRWAb2IK75rElbC8yp8IqewvMgdPeqHTRTsXfyZrKCImVaZtN13tzV4P1qmALcIjQvPXCvYZDOSMooXaDMGpZerONrxITfOK1BxxNALr31chVzyhaEtAN6XPh6ubQ5JbMbTQt4RuYySuQZhD9CGle4jZfiSi3IFjfddosIbH2O4lEqZRYFyiGbAhaUgB3IbEaKBTIQZpvdI1XcZlJSbjIZkn7S8XzahuTQarol4IkbN2BaYfakBC3FqMS9OvvGlTwAQjMwtu5c87wH2xB5JDxNdMSIEBRpcHK6A7kkLp2LrlOJEW8jq9ezrrcCMXQ31xVw7JCcRV5qm1LHLZqbq8hHdzxSkyOMrO63amr59hLKsLNAGZORmU2q5OkAhCgntJVUjoHvjskkbtuT81lDM5Zu1zzSxHO6ygKl6AtuwgDNRjAFfUEJcuOdm11SVAlKv9yCTVYAmheNOJXtwm4sUiipR7YLapLFyUZ44JBULPg4bsFqWJy9gUosIBuKRvgJnTnZNyT596Bh3wV9RiK7n5fet2e5zx4lZcENfgygeWKdod6NZYVNmM7a8Hv1HtDpSFrTsWq7e8QF67F5xA4Adgqc4GjRDuApTZZGm4wTJ5IrY4lf3FJWO7MP4RhWA6DljBhEOh1kJ6NnKeW1tyclZ8U5lTIEK6IINIQjzAdIDcgnZ1tHelnjstJuvdzm9wTBslWajeBRfdPle7375VOnNvi9y1rvLKnAJguLAKP7LJZdTxXCdZL7zUODUjAxunyLz2ZJSYFlQbOWjwH6f169bFE8pRWV5jWOf1IFA15WvG3AHDRWacl6YZligf5fgJgUslufYeaSad59eHd9oyIDcrzk8Ne1z9jLkTP8ghaCFuZHUOG9JV2uZNaW2CiNyg8BooW3x8wag2wkJnlXrRPlq97sqDMgC7ReyjEJNZN2B7Zcx4q96JgZsQzDavWZ33QUaRrYYoIiLPtq5OkKLG8eVyROwIBI5CwwW8sBT6bxb3Df4RCoSEVSDdrQavh7PIwq3TwqgbdTJmOQ2JYcjkMMh1U99TaVlvEu2M4kJZ12Id1vvehQhcuPor4CYH3WxoOcQ9ddOcV8NNTvPpxvswtXviPHwvrWh89sQaK1ZEuU56LamDUVUoQ81Biq5GsLjHRMOK5GAAmC2SBOfyLn8AmhdIHgmoVihopeVEjgStm3AFZRC5zDXKrrjgsisxhpKKjjLnbJ14rv3NgHvrXZJh8Gr675SRC2dEj8jb5b5pLP7njMN5Jm6kb3CrnJzQI81bijX93G3NDpVhKzmMR5aRWELJ8TOMZGrKhYw8OnMRt9ZbOAUBr5rCuEJJoKoHwIH5sQcJJo6tStgxqm5QKNQ8ucgrlYot3iR6b7AoPVFNEn5y9rr9dfGFiuYakQnHVuW5WwJiNe8hFlahasqnoSGlUKtvP7iMfpQxqm3oWuWC1pHtn1oI3MYZ2hbkv4vUGdojppnsh1yRU8eIjMBB3v5iVksKawM3A4hsT1W1r8iiKCIm9tgNs9XDBgCfLSgWZc9nY3pnI9ms5uxyJMpiumWfGoOtrZy7zOwHYUNE6rSdBTsdyt4ouiO6s98trjBRDdQojxBIbrVH9yG2Ml5FZEHYQVzveMPibGsEznEefyrkJDNueciYEFbquc36mS1hOyCZwrfDdgfNxVMQlSntj6eLCpk7BClsSdtc5e38F475SI39ghWzWee7a69EQzrgi25jhP8KQtIqfNqcLkxXIRXnEO78aOkUFsqFnNZgF4Dnfw6DhUxEUoCem7LdJVnphVnUIhwfFqjLGLGOT5jSYFN68CwRX5sw2WIXRT213aaFvVfVnL4dy7ugwXIjmVMOw28YuRdJGXsuPXbU74XtnG8HIOA6BHZCXJcrqQcj6toSTkmvb12LoRwfARj2x783gCr6H9upsr5N831dhHftFETsBRTaarD2WlgXtu2vCAws7CMjMhrhrzRIWymTBtodevXn3d9S3IDmy8KTJTo87Iu9rKwRdxD6WOMUS8yyUCfjlanNOLMgdGbGygbZpv2TEYOsDCrlZ94mxQvGm5bctCN3qX1vPLFEuI8a4AjOLbJRkQsXn84HKaCHPIARff2biODs7sapmAMt4mSOwaQT3xhVdsqRBoZ3w4c4SbkevlG5f5Tf5wN7xrQLG9TzYcQDmjxYChBeFnLTyhXY4y9ZzaN4YJliBaj7zpluKK99TIinNI1B3DYsCt1qxgVFUmtoBg9aOaxuYoqiYJmplbkIkHLfpLOArlQcAMsOyBMvhrfGdaGvSC6guHMGlkZdTfmZgWBBPGgjQWHRNn9Ngr9P5Q8IF2p2aHj74KTUGzMHp5IqbifVH9buc4j5u2TKfRtz4bwrjVylkW4hXlUm8hQz6NfhrvcrltWeZkz93YbCBKqyTuwk6nHEe2gDUDXmNJiGgf2iosGKWHpIVgMOP4cF9g4dSFK86rsmS3Po2DvFF4xt6ESDdYGKCxMR3QZASRNqzTLgJksbL6dREglnJLrnvqXgGu7TYQ5PFYz1vRMLT7K9XaanC7CgR1xONUkukKsneuQYs88LlsoTzYGKHLkrVYRJ1tQ44twxSE9RSvyh5vfYcSHsss

Extended Key Usages

ExtKeyUsageCodeSigning

59:b1:5d:1a:ef:f8:e0:73:af:cf:f2:49:3f:a6:89:88:9e:ae:b8:24
Signer

Actual PE Digest

59:b1:5d:1a:ef:f8:e0:73:af:cf:f2:49:3f:a6:89:88:9e:ae:b8:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
GetSystemTimeAsFileTime
LoadLibraryW
CreateFileW

user32

LoadCursorA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegOpenKeyA
RegOpenKeyW

ole32

CoUninitialize
CoInitialize

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 526B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

27a3d73424e64c9f11a9f5c66f146847

Code Sign

77:85:24:19:97:c8:6c:7b:b3:46:0e:9c:a7:2f:67:64Certificate

Extended Key Usages

59:b1:5d:1a:ef:f8:e0:73:af:cf:f2:49:3f:a6:89:88:9e:ae:b8:24Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

ole32

Sections

.text Size: 3KB - Virtual size: 3KB

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 526B

.data Size: 125KB - Virtual size: 125KB

.reloc Size: 1024B - Virtual size: 516B

77:85:24:19:97:c8:6c:7b:b3:46:0e:9c:a7:2f:67:64
Certificate

59:b1:5d:1a:ef:f8:e0:73:af:cf:f2:49:3f:a6:89:88:9e:ae:b8:24
Signer

.text
Size: 3KB - Virtual size: 3KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 526B

.data
Size: 125KB - Virtual size: 125KB

.reloc
Size: 1024B - Virtual size: 516B