280aa8c5c42e1a0d778f2375b6499665_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

280aa8c5c42e1a0d778f2375b6499665_JaffaCakes118
Size

345KB
MD5

280aa8c5c42e1a0d778f2375b6499665
SHA1

2c00ebc1941f49008d5f65efe92c8a6698910ae2
SHA256

06992a7485ee86d9ab6de4cda5d0650b72db199de0fb4441862f873ddd0acf5c
SHA512

11b0ce8f38c54ca9772f2c7efe2472817971d7b841d21feff28a4736eb35028affc1c66e413c8ecb23126a28fb47518d9384c0e4c6b761c78ef92c26ba9114dc
SSDEEP

6144:u36Cg1VJWZLyrOkHFyE3D4uH/2yTHYi4rXUcIVbZ:u3hQPWRyBEE3D4UeO14LULVbZ

Score

1^/10

Malware Config

Signatures

Files

280aa8c5c42e1a0d778f2375b6499665_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4f6fade1a7961391a9c709a6dac08217

Code Sign

39:15:6b:15:21:4b:d8:b9:4c:b5:c3:f3:cb:fa:0d:b9
Certificate

Issuer

CN=a

Not Before

01-03-2013 11:22

Not After

31-12-2039 23:59

Subject

CN=a

Extended Key Usages

ExtKeyUsageCodeSigning

3b:9d:5f:4c:76:9c:5b:49:03:ed:ea:b7:f0:bc:01:ee:fc:d2:08:a9
Signer

Actual PE Digest

3b:9d:5f:4c:76:9c:5b:49:03:ed:ea:b7:f0:bc:01:ee:fc:d2:08:a9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
FindClose
GetModuleHandleA
GetProcAddress
GetCommandLineA

user32

LoadIconW

gdi32

GetStockObject

advapi32

RegOpenKeyW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata3
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata2
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f6fade1a7961391a9c709a6dac08217

Code Sign

39:15:6b:15:21:4b:d8:b9:4c:b5:c3:f3:cb:fa:0d:b9Certificate

Extended Key Usages

3b:9d:5f:4c:76:9c:5b:49:03:ed:ea:b7:f0:bc:01:ee:fc:d2:08:a9Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 307KB - Virtual size: 307KB

.data Size: 512B - Virtual size: 216B

.rdata4 Size: 1024B - Virtual size: 1000B

.rdata3 Size: 10KB - Virtual size: 9KB

.rdata2 Size: 10KB - Virtual size: 9KB

.rsrc Size: 1024B - Virtual size: 864B

39:15:6b:15:21:4b:d8:b9:4c:b5:c3:f3:cb:fa:0d:b9
Certificate

3b:9d:5f:4c:76:9c:5b:49:03:ed:ea:b7:f0:bc:01:ee:fc:d2:08:a9
Signer

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 307KB - Virtual size: 307KB

.data
Size: 512B - Virtual size: 216B

.rdata4
Size: 1024B - Virtual size: 1000B

.rdata3
Size: 10KB - Virtual size: 9KB

.rdata2
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 1024B - Virtual size: 864B