114aa590ea5874974dd5a6465077a4be_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

114aa590ea5874974dd5a6465077a4be_JaffaCakes118
Size

134KB
MD5

114aa590ea5874974dd5a6465077a4be
SHA1

099d19ecdfd72cf03790ccad52ba9a101fa2fd9a
SHA256

b5febd85443ead5d23e2ef8ccf383d605c3a3561a868f3841964e61bc1781e46
SHA512

78f3984c89403ffb8bfaf0fb0ae58651bcad5448b015e4d90131b18d170153c32d0757d70580ff4da821c5523f78bf5518973fa23faa5f1693b5f81106f24e6c
SSDEEP

3072:1Gz6I853UK92yhOQ/prtC/E/Xeu2fvR0WNMo4NSeS:1Gi3UK5QCtC/Emu2hAo4NSeS

Score

1^/10

Malware Config

Signatures

Files

114aa590ea5874974dd5a6465077a4be_JaffaCakes118
.dll windows:5 windows x86 arch:x86

55c5cf5df1ae37ca1dec0a6b7a28e8b3

Code Sign

15:e7:c2:7f:1b:86:c5:44:be:cd:e5:1e:e1:74:a9:7b
Certificate

Issuer

CN=939515!7!5!166963!777951584!!69844863351258994876!72793536!1!373!741235974689!!41617791!13243536184995692232!448165292!!777!429947551822674!28!283257472127!853591313243!!52228267655917386!553363376778

Not Before

13/11/2012, 05:14

Not After

31/12/2039, 23:59

Subject

CN=939515!7!5!166963!777951584!!69844863351258994876!72793536!1!373!741235974689!!41617791!13243536184995692232!448165292!!777!429947551822674!28!283257472127!853591313243!!52228267655917386!553363376778

Extended Key Usages

ExtKeyUsageCodeSigning

b0:4b:04:41:cd:df:d5:cb:43:24:e4:8e:91:3d:ac:c3:8d:11:4f:10
Signer

Actual PE Digest

b0:4b:04:41:cd:df:d5:cb:43:24:e4:8e:91:3d:ac:c3:8d:11:4f:10

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryW
CreateFileW
LoadLibraryA

user32

LoadIconA

advapi32

RegOpenKeyW
RegOpenKeyA

ole32

PropVariantCopy
GetHGlobalFromStream

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55c5cf5df1ae37ca1dec0a6b7a28e8b3

Code Sign

15:e7:c2:7f:1b:86:c5:44:be:cd:e5:1e:e1:74:a9:7bCertificate

Extended Key Usages

b0:4b:04:41:cd:df:d5:cb:43:24:e4:8e:91:3d:ac:c3:8d:11:4f:10Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 2KB - Virtual size: 2KB

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 512B - Virtual size: 400B

.data Size: 117KB - Virtual size: 117KB

.reloc Size: 512B - Virtual size: 494B

15:e7:c2:7f:1b:86:c5:44:be:cd:e5:1e:e1:74:a9:7b
Certificate

b0:4b:04:41:cd:df:d5:cb:43:24:e4:8e:91:3d:ac:c3:8d:11:4f:10
Signer

.text
Size: 2KB - Virtual size: 2KB

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 512B - Virtual size: 400B

.data
Size: 117KB - Virtual size: 117KB

.reloc
Size: 512B - Virtual size: 494B