12117088cf01b3c8f404b656048a40dd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

12117088cf01b3c8f404b656048a40dd_JaffaCakes118
Size

189KB
MD5

12117088cf01b3c8f404b656048a40dd
SHA1

2c9169439ad5c417039e00fab4de4a53d5264dd5
SHA256

a8183ef68964437274f99ed152688bd87581c0c85323d433a120f30c92dace0d
SHA512

19fb5183ccea404a3907553eed5c9c72f1bf122b6802a0bf789cf11ec4e4ed4273b4bf09ae531e2dbfa757fef84da1a97d350c295a4a454e82291e1e7fadfda5
SSDEEP

3072:vTa7GQxcBABVO0jHvmV0JDv9rkBAiBw6v4RQJ:G7GkcBAhLWrX9

Score

1^/10

Malware Config

Signatures

Files

12117088cf01b3c8f404b656048a40dd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

385d8ad88f768d17714a5e1ab0cb2e0a

Code Sign

2b:57:f4:2c:68:94:54:4b:b4:4a:3e:48:c9:ae:6d:31
Certificate

Issuer

CN=73548594369171773341995181489275976519744262882683598894579598686846358143158445913282974626549981213338163574793874442735315749123823693967881957132729114

Not Before

23/01/2013, 06:13

Not After

31/12/2039, 23:59

Subject

CN=73548594369171773341995181489275976519744262882683598894579598686846358143158445913282974626549981213338163574793874442735315749123823693967881957132729114

Extended Key Usages

ExtKeyUsageCodeSigning

bd:7f:ac:65:28:4a:c7:ad:05:16:ce:79:b9:33:12:db:36:e5:17:8a
Signer

Actual PE Digest

bd:7f:ac:65:28:4a:c7:ad:05:16:ce:79:b9:33:12:db:36:e5:17:8a

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
VirtualAlloc

user32

RegisterClassExA
CharNextA
CharNextW
DispatchMessageW
GetDesktopWindow
ShowWindow
MsgWaitForMultipleObjects
PostThreadMessageA
RegisterWindowMessageA
SendMessageA
SetTimer
wsprintfA
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer

gdi32

GetDeviceCaps
GetStockObject

advapi32

RegOpenKeyW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

385d8ad88f768d17714a5e1ab0cb2e0a

Code Sign

2b:57:f4:2c:68:94:54:4b:b4:4a:3e:48:c9:ae:6d:31Certificate

Extended Key Usages

bd:7f:ac:65:28:4a:c7:ad:05:16:ce:79:b9:33:12:db:36:e5:17:8aSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 13KB - Virtual size: 13KB

.text2 Size: 512B - Virtual size: 100B

.data Size: 167KB - Virtual size: 166KB

.rdata2 Size: 1024B - Virtual size: 1000B

.rsrc Size: 1KB - Virtual size: 177KB

2b:57:f4:2c:68:94:54:4b:b4:4a:3e:48:c9:ae:6d:31
Certificate

bd:7f:ac:65:28:4a:c7:ad:05:16:ce:79:b9:33:12:db:36:e5:17:8a
Signer

.text
Size: 13KB - Virtual size: 13KB

.text2
Size: 512B - Virtual size: 100B

.data
Size: 167KB - Virtual size: 166KB

.rdata2
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 1KB - Virtual size: 177KB