296a3f43ca1a6b168e9b2704bd6eff14_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

296a3f43ca1a6b168e9b2704bd6eff14_JaffaCakes118
Size

196KB
MD5

296a3f43ca1a6b168e9b2704bd6eff14
SHA1

2966a0cde8c32ead43914a793ec3bef6f4815976
SHA256

882df9fbef2f5963588d3a3c7d1f917dd56a88458c085e719cf8b02babe2c467
SHA512

72f7e2b85248b782330c7f393525707c3c088dd514e75dae73488d7b0c6fa73c667b495416cdf90115a380dbff60de4ea15af26c030f20d193df754486f9a163
SSDEEP

3072:CC8TplBu6WHq8RMyYx2S5wCior26x2LK21ZzIIE:cBuNayYx2SDioGWIE

Score

1^/10

Malware Config

Signatures

Files

296a3f43ca1a6b168e9b2704bd6eff14_JaffaCakes118
.dll windows:5 windows x86 arch:x86

c305fbda383487ea81a47c686905e831

Code Sign

36:1a:3e:fb:66:45:fe:86:40:60:df:3d:21:88:3e:df
Certificate

Issuer

CN=u48y5w55hujy4lozpzu74xpmqmztml8iwu5tjtnujjtwrlmilo5piwmswyphpv95urmmopup9tv7rrro95yoinuims7mx7iov75hnhrsj4up68k8uhmqs6t9xopyvirlkjy6pqqrhr8rs4vy7ov6t8hrwt77lmkozvrrzr7jrv4rw84xkrt6k6j579o7kqn7kr6mlirwm6sqruzkv5lm8ku9rhwy6xyplooujokrsqzluyozxqjyknh9pxqjrlps7pvsuknjn67rqwpo9ulxy4nj6mttsl6nsozznx8yittu7rsioo4qkn48s4oop489mqqjx7jsoivy5poqvjw6yoiry5sujnjnxqs6zhy7x4u7twqh5h77mtqyppkip669sunmnlu69sn77ujhowkimujnm96vs7vnqzwlutppls8lws4xq9px8ko4s4vsqxsurpxswmy5qxmkiwxsvz57m9kolrx7yu4uym9vjvl78sl4jt6oxhryt6vj5h5757vms5u6r6mumzniqrrorvny9us56omnvm56li4qspk96hpvm6n77v9rs5xn9tsuv6rhrsrh8pmxwnx5sno5n4ujqv5uhqt9kpmv79ysinvqqh89zkm85sp48yvl8ly4kl8vvmmi6tomlomjohzwisno5js47565l7jssn9j8sptoz97hsrpvkroux6pmulzrkp75yrutvw7jsl9shz7notjkrjlpomi4rh58xpltr6njiiz5qis8ru6rqs45ti85ssur69uur44hzpm9lxq4r7wyuihtihrx69t7s9h5l98xnkpsj4oi4thj97hos9pmqxvnmrymn8th496r5tmlsuwp5hjnzknhyv4rqxsppisok5lyj5oxhyx4lm9wsktkvzuw4xho8yl5w8w54xiot9oslnv5w9ns78tjzv5h6imhiik7v6p8u8oij6lp6ksrq9uqilkhzmrt6rwzqjkxmqp7jun8ps4l8u7hmt9rpnhj6sw5ji6wnv6hr5wsymzurli5j9lirjqzumtmvnkm4nhhrjq8jhv75s5zkuns5vnt5iszzk57tt6npy5tp9pq9zm5ptxypsxxmys5wilqz4iyvzxuwt7z9owpmutx5q5w4olulnxtnhl7sqztzv5q4qvy6zyyl8p8hujvr8hlotvntwpiiqurrjhr4w99qvipiourskov49pwhr78rxlthtjnjk7npxjytivip649juqvvvllkuzixspitvw8it5hsviml9k6iyorx5n6ms9js5s6kxojunhuyjvnlnm4mswi45snjppqwqs5yvzt6iuwplvntrkvsjt9tjp4yullpzxor5utj6yym6m5pirioqhtsj6hu4vt5tw4jqkkqwhsuvto8yzq5s8rnmkyykqipim8hvyl5jpyjklywyj4u75ovyxzzlmll5wu9lm7whyso5zxys6uuxiojykkz6u4yhnwrpqp9is49nvtsktotjzoupvlqtvtn75lkyzlkzphttyko87zuh44xvok47nxmuowvlw4prnv6hi nw5myqv87nn7 nw5myqv87nn7

Not Before

10/12/2012, 14:23

Not After

31/12/2039, 23:59

Subject

CN=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 nw5myqv87nn7 nw5myqv87nn7

Extended Key Usages

ExtKeyUsageCodeSigning

ba:2f:53:ff:23:bf:b9:0c:b7:c9:53:1c:9d:f5:29:cb:c9:44:30:d5
Signer

Actual PE Digest

ba:2f:53:ff:23:bf:b9:0c:b7:c9:53:1c:9d:f5:29:cb:c9:44:30:d5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GetProcAddress
ReadFile

gdi32

GetStockObject

advapi32

RegOpenKeyW
RegOpenKeyA

msvcrt

_except_handler3

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c305fbda383487ea81a47c686905e831

Code Sign

36:1a:3e:fb:66:45:fe:86:40:60:df:3d:21:88:3e:dfCertificate

Extended Key Usages

ba:2f:53:ff:23:bf:b9:0c:b7:c9:53:1c:9d:f5:29:cb:c9:44:30:d5Signer

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

msvcrt

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 512B - Virtual size: 354B

.data Size: 134KB - Virtual size: 134KB

.rsrc Size: 42KB - Virtual size: 42KB

.reloc Size: 1024B - Virtual size: 592B

36:1a:3e:fb:66:45:fe:86:40:60:df:3d:21:88:3e:df
Certificate

ba:2f:53:ff:23:bf:b9:0c:b7:c9:53:1c:9d:f5:29:cb:c9:44:30:d5
Signer

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 512B - Virtual size: 354B

.data
Size: 134KB - Virtual size: 134KB

.rsrc
Size: 42KB - Virtual size: 42KB

.reloc
Size: 1024B - Virtual size: 592B