2744dc06d86d8edcd740cee66d4955d7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2744dc06d86d8edcd740cee66d4955d7_JaffaCakes118
Size

123KB
MD5

2744dc06d86d8edcd740cee66d4955d7
SHA1

bf773c6212f62856ef8fa1d83bd3f12aded2a240
SHA256

61a758e01fc8e3ceeeb25cedd70736a0cd9fbd47f5afc8e28bdba65556a1847d
SHA512

58bf8a503a3f294a80a40943669dbb1c13de88371fc866918a5d31d15f0abcd8e36e4ee82ea61116c92a0e89acbf85f6141acb8636e9791b1f28cab057e99f05
SSDEEP

3072:Ek8p9PkIoUiB0iK2kP46jMeziEmve7ceJJQdRyEe4NSf5:EBpRkdB9K2kw6jMez3q4rQBe4NSf5

Score

1^/10

Malware Config

Signatures

Files

2744dc06d86d8edcd740cee66d4955d7_JaffaCakes118
.dll windows:5 windows x86 arch:x86

763edfaf476f4956ed08095ef3f30038

Code Sign

15:e7:c2:7f:1b:86:c5:44:be:cd:e5:1e:e1:74:a9:7b
Certificate

Issuer

CN=939515!7!5!166963!777951584!!69844863351258994876!72793536!1!373!741235974689!!41617791!13243536184995692232!448165292!!777!429947551822674!28!283257472127!853591313243!!52228267655917386!553363376778

Not Before

13-11-2012 05:14

Not After

31-12-2039 23:59

Subject

CN=939515!7!5!166963!777951584!!69844863351258994876!72793536!1!373!741235974689!!41617791!13243536184995692232!448165292!!777!429947551822674!28!283257472127!853591313243!!52228267655917386!553363376778

Extended Key Usages

ExtKeyUsageCodeSigning

19:c8:5c:1d:03:93:aa:ca:4c:01:7d:93:23:35:fa:eb:35:b3:eb:dd
Signer

Actual PE Digest

19:c8:5c:1d:03:93:aa:ca:4c:01:7d:93:23:35:fa:eb:35:b3:eb:dd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileW

user32

GetSystemMetrics

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegFlushKey
RegCloseKey
RegSetValueExW
RegOpenKeyA
RegQueryValueExW

ole32

SetDocumentBitStg
DcomChannelSetHResult

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

763edfaf476f4956ed08095ef3f30038

Code Sign

15:e7:c2:7f:1b:86:c5:44:be:cd:e5:1e:e1:74:a9:7bCertificate

Extended Key Usages

19:c8:5c:1d:03:93:aa:ca:4c:01:7d:93:23:35:fa:eb:35:b3:eb:ddSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 2KB - Virtual size: 2KB

.text Size: 512B - Virtual size: 32B

.rdata Size: 512B - Virtual size: 512B

.data Size: 115KB - Virtual size: 114KB

.data2 Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 482B

15:e7:c2:7f:1b:86:c5:44:be:cd:e5:1e:e1:74:a9:7b
Certificate

19:c8:5c:1d:03:93:aa:ca:4c:01:7d:93:23:35:fa:eb:35:b3:eb:dd
Signer

.text
Size: 2KB - Virtual size: 2KB

.text
Size: 512B - Virtual size: 32B

.rdata
Size: 512B - Virtual size: 512B

.data
Size: 115KB - Virtual size: 114KB

.data2
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 482B