15797457ffe5e1cab83b1a0fff3b2d22_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

15797457ffe5e1cab83b1a0fff3b2d22_JaffaCakes118
Size

262KB
MD5

15797457ffe5e1cab83b1a0fff3b2d22
SHA1

cef5c204bb905856c3f173e09ef1b5b42d39192c
SHA256

4c590fdc0932a802b86690c24fdc1b3a6d8b6886d0ce06bf744d586d1623f327
SHA512

4bc53b0e19ffee2ec84e1b434bd801694a8ab2fa8aac599773744e6d9acd1741d6ffa1bc788c611fb3e20397d24e44b09d856779322dce6c56c3d95ca2019480
SSDEEP

6144:7W8Gp+df0afmVTRMd+dpn94sLrNXel9Xb98+MAuzj:S8YkfXf4TRMm94svNuzXb9ZQ

Score

1^/10

Malware Config

Signatures

Files

15797457ffe5e1cab83b1a0fff3b2d22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51faaa25dc23f004def8c4c23e21714d

Code Sign

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77
Certificate

Issuer

CN=ggggggggg

Not Before

17/01/2012, 12:30

Not After

31/12/2039, 23:59

Subject

CN=ggggggggg

Extended Key Usages

ExtKeyUsageCodeSigning

8f:5e:57:73:12:4e:3b:0c:f4:77:3b:03:43:4a:7d:29:c0:4a:96:fc
Signer

Actual PE Digest

8f:5e:57:73:12:4e:3b:0c:f4:77:3b:03:43:4a:7d:29:c0:4a:96:fc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
GetModuleHandleA
GetProcAddress
lstrcmpi
FlushConsoleInputBuffer
lstrcpynW
WritePrivateProfileSectionW
GlobalSize
GetProcessTimes
GetCPInfoExW
GetConsoleDisplayMode
SetConsoleCursorInfo
GetNumberFormatA
ReadFileEx

user32

LoadIconA

advapi32

RegOpenKeyExW

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51faaa25dc23f004def8c4c23e21714d

Code Sign

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77Certificate

Extended Key Usages

8f:5e:57:73:12:4e:3b:0c:f4:77:3b:03:43:4a:7d:29:c0:4a:96:fcSigner

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 256KB - Virtual size: 255KB

.text3 Size: 512B - Virtual size: 512B

.data Size: 1024B - Virtual size: 828B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 308B

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77
Certificate

8f:5e:57:73:12:4e:3b:0c:f4:77:3b:03:43:4a:7d:29:c0:4a:96:fc
Signer

.text
Size: 256KB - Virtual size: 255KB

.text3
Size: 512B - Virtual size: 512B

.data
Size: 1024B - Virtual size: 828B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 308B