174373fbc113579fcf9c0b96b208bea6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

174373fbc113579fcf9c0b96b208bea6_JaffaCakes118
Size

285KB
MD5

174373fbc113579fcf9c0b96b208bea6
SHA1

20528640b2f9f29a54f1c5c2ada9942b8d93e0fc
SHA256

9be121acc33a44bc57822668124b3ff0aaa321b93fca77d07ac30b8a4217e708
SHA512

d6ae5c346c802b2e67b8b5e6dc3391091e88d17b286f020d8aae8eccdd04ab8c47d8f4e56443f28983703b52e4c73e2d3dcf93c2a7f23cd4ffda5c0d58708187
SSDEEP

6144:MUAFN35+p6g+GznhxVCrXBpq+v1VGRAU9A4a1GiCOHjjFHn:yN3Mp6g9vVMRY+v/U9TeGrOHF

Score

1^/10

Malware Config

Signatures

Files

174373fbc113579fcf9c0b96b208bea6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a51461c5adc6e7c0173f5176238af0d8

Code Sign

50:c1:5c:89:91:c0:ea:b3:46:41:c0:18:b7:64:ac:db
Certificate

Issuer

CN=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

Not Before

09/11/2012, 12:32

Not After

31/12/2039, 23:59

Subject

CN=9Q1rOUNfdlSQ8bRsBbAPRqdEIBAjVL2KiIqgMStU113vUkBF4xmazvuGTHPGAmq68EjBeucyomUOi1EREcYvk8cdgkkJP6t1rvoEL2ivGHKh3cyMsezUg5hCRvdjtRQOyw7h6ImdGMB1XF5i36V4AZXtjIqSlptXmnJYUHgjNLhRUaiqAEJjxuNsJMEyhry6dagWX1aATangKjypHdnDk2yrNXo9bxAW4lwY1zuYqXhkoEuzAq5Hh1ksIUU5XblumN5ASeXAlw7PKD2qXoNOHJrEcHgsALSM5PkToJAE9CReOClE6BiWWozovOh31Dx5J9qHoKDBQpfyzPU4JY8In6C8r7yfhWUMoQhrNQFY1tJA3twEfOCpqQNwjTw9qRUsCrBgxtywJPCHjBaxqPRWwCAmXQjrvnJNxPUSyZo6CPZYrbcZE9KW9cKCN4UxErOHMnuJPJzJOkG6y7cvRhWDNjloJ43sYRTavMmVqQOD2ukrPb4FubTV1CGWdJeUGq2osdoamr59rWk1r4WeucQonFnIcpLeWJtHObcOIvCLOHSwBoj6n2NdsUjhdNKqZnQBpDaYDWW9pcWhyDQnaSxiUIFmh32b7N1JuWujeAS73gigAgBgqiDaokTRZGgLzn7UTS9cHawC49r9ZxPagesZAVIQsDQdImy6ZAQCfgfNjtHe9J8Bj38DeBbvhh17TX6pHEah6qGXcictoWkhGyAA4kxdEmJLugG7o4nux7NvE5Mt8fz48TvZSYpsf1N7VeCF4dzfSEN49G9vOyhXOHnGuoCVkPJLEMrDaRCaqhcmFoGwTJ78xWs7LfktBLTXaIZLJebyzbKjJRE5Sy6Tx3Noy9V3penDWKoXkVGnGpxZqc4qiErJEMekNCaOyY4lyv1iZXmddUTCiREtHCIhepkkq5Z5neEiAvzWnKbmCBsytK2KGVIl9vuvoRGhLxAoCaZkB7VHne7mCcxuRXzPM8TBJcM2aX7bjOyVliaPZu3HURhxTZET7Hu2ue87tRfOjJKrNUeZ3ZKr4UbrugBLA5ZPGZNrd6Mcl2pHI2f48dWyjOVlkOpRctUJtte5mRjM7MAIm56AOAGerx16bHfLvzz7Vu3isNcLpXFCwVuLNohLJnFdNNEcyq1ZgPetBVyXZpiJxPSsISjE37UM1Xq3Vu65Db19nIlPJTowhsvbiaEuKQBFFUBlNDsGi6T2UYgws8bA7Sp7ggs5KajjChyjL9wOt4GZT1MN4G9HXAn4p8blsZpNMzUh4Hu8sts3vrc9t34Pjs1wwBwpPI5V6hBKopkWADzmtlxCCCY27NGCrqvuo6f8wJMqZJNecJEg4cDZuIfzTixa1hn28kCt3cX6FBsAFTDf3R8G7wtOJ3vBbHIzDXJIIPSLJkCkp8JXLEnKwbxmaAk3NanPYZQfzHAy1BomSmqc4fyVNHDTkOsfT3sILQ37INoKTyEhwqsTlJEB32fjQ5dDqDnebia1hZTNhJ5lR2SduCoNoY5BT5Cip8PzRyPlo5ZkC38srP2nXPhd1jaXcYwWTAM64fs7gKQ4SPZbOowOKGCb7FOKYiyYZ3tivmeZ6CSWyRIIAae7lSvJVBCrZZ7rMnrOsm8k9bQ3Fh6Wotl1NyMwHAqGyro1rquvJ3T5FQJzOCGqSCipGg8RKXoiunk68TIjGG5VZWPV4RQiKKPl5VUJo2We9YFF3pum9TYbtIIF4pIqJXX2EToLYXOCrPYqsvuWyKILshfsVZdjzfYOyVxgTPXILTwFCCCvOH9kmExbpP173steuc78AEGY7zppO68CoBV7COZOFuDCZriVFfEZsjwYVEvfpbu4iJw4GBlyuXkjgRALQ4w72BjtgktvK2uJ2K8K5LxH9G7kIlLJl1OoNgalDdJ9fIdHFLLriZQKrqPphpxWXTrpkStF9jvJjcXbNgd1VQMkJq52TtSI3T3m9ZWDo3LAomoyw721yMdeUjggwR4vvC7aU3wDwgkzZYpluDAFNdcpm5wQbODUJ4Qkemscd9IjEJbgTxYQjp8W2cOdTtpIGDj4MbfYEni1Tec8rV83LzF8ntRpKRwQPahdhEIQBXazkXbWokJsUNLmqbd9PYlmcQkhrOVLjoewxlbTuEhUt6EdGX8OhExvjlPr2FiUzub5bGvi4gYUeoPpeSFqfE5GeFVvP3qAJwt6WcKAVRTAYv5QEoIFUEbrAhyVGKgfEan6x1MquCPKA9tz6nTSxentu1pSsrZvHuSeGbLyC5pRUWnKb6D5lRrED8Y81H99OYOlaA8XKdX3RtpM8g7UDXtZbhw7h2t7swMTL8BIPlH3m9t8EVkGIOOFSx6VcO2tBp73mxa5phwjolNvZD2mWC7ZZnxlLo9tMkZALs7srbbUWhOGVfKzHuiuiGtLZWsx1omYTs1pwD9C4ajGN6PAorxL8IghVBQcU8SjH2GEJDJNL3kCrSoltpmEjc6zDoubyr6l6wh5HyZvbTaNdJhrocw4gdV4eeQlCEhv7ebIydNtqBqD2bc8Fx2aSgwLQWGIfvtSKk6KYOJ2DY1MkayjQ6gaCgmoDjZua8vc3UYwdYee1G4X6ZCyvpNwswKhPX6YA42P7Z5yXIuJLl36Orn3dVxOSMMrErzIigqQ4tVuwssT9sEgwFDHB1DMX9kwmehkA4RW1bl9H2UGrqVHMdX1mVzjga1QfFnBigltbNpuOFnKVB9MH2Hb9R4sRMhqC3iyK1ArJYvEL2apYbS3Sw14IR8pqljPRyJgSS8wVfiVVanBXjXcvsN8NW3x7A7pnhGZ7Qh433HJfvTWh2y5gZLydYqmBHr3xbrenj71nHWGaWnJli3IlLn9JL7y9eRoObwv94v3guxwHKgSEV8hwJTmf2eWuaHFH6NBti7q3xfamAKXGIN44kokClexUR4NIBnoTCn7aW8EcySeYkjzNkEPKfMrg8PnnmDXu3uJZExfO7qA6ibr5XjjBaSYR9IAgRgvQZsw2x6ikbWyB8grLRJQ8pOBCv9kZyfo9h4qKoIkn2No9cCwh26cmd6UWen8dLM929RZFSz39p6UoMEOwVmKjKAHMIpczJqsIdcumD8jloKFY72y1oeA42mRBM3oMCXaVybMn8a6exsQFgHaIEepH2PvqESbzsugXAHqmMFzyJGgceRdcmDBmAEQMXhLHfmTAbsBVTY4ElHojX4ruAybduMhKJmVXNfn8BVdNGG1l5wpRg3IdNOQrptmVq4ccW49tvlIDiF5Y7Y7FQU6sR4VhTdNtR6DfkZRZYIjdK43vXEXCm1LU4IrWtOr1kW6ZyAhDvRPhYkOjCV4BlX6L4X2MvmjKrSXn6zkOX

Extended Key Usages

ExtKeyUsageCodeSigning

4d:4b:6b:d2:63:c1:53:a0:2c:29:45:2f:da:42:30:ad:36:84:6f:13
Signer

Actual PE Digest

4d:4b:6b:d2:63:c1:53:a0:2c:29:45:2f:da:42:30:ad:36:84:6f:13

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetProcAddress
CreateFileA
GetModuleHandleA
GetSystemDirectoryA

user32

LoadCursorA
LoadIconA
GetDC

gdi32

GetStockObject
GetDeviceCaps

advapi32

RegOpenKeyExA

msvcrt

memcpy

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 498B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a51461c5adc6e7c0173f5176238af0d8

Code Sign

50:c1:5c:89:91:c0:ea:b3:46:41:c0:18:b7:64:ac:dbCertificate

Extended Key Usages

4d:4b:6b:d2:63:c1:53:a0:2c:29:45:2f:da:42:30:ad:36:84:6f:13Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 256KB - Virtual size: 255KB

.rdata Size: 512B - Virtual size: 498B

.data Size: 512B - Virtual size: 200B

.rsrc Size: 3KB - Virtual size: 2KB

50:c1:5c:89:91:c0:ea:b3:46:41:c0:18:b7:64:ac:db
Certificate

4d:4b:6b:d2:63:c1:53:a0:2c:29:45:2f:da:42:30:ad:36:84:6f:13
Signer

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 256KB - Virtual size: 255KB

.rdata
Size: 512B - Virtual size: 498B

.data
Size: 512B - Virtual size: 200B

.rsrc
Size: 3KB - Virtual size: 2KB