2c5fec5355440d18348c58d686a70ac0_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2c5fec5355440d18348c58d686a70ac0_JaffaCakes118
Size

80KB
MD5

2c5fec5355440d18348c58d686a70ac0
SHA1

6148e80b671ca182ea4a700594f50e642f788b18
SHA256

303ff1778370e950a3a1bc4a099425803beb0ff4b6fa38c1e6fb5ca406f302f9
SHA512

55bd4ea2abb02952f6d10152b5f2664ad355f62d87c8e4d29b0df1d25a7e461bcee74107597815934b4623a3488f2461ea1e6766729dfc97b2eb6ad9f39245b9
SSDEEP

1536:kK1aXoacgAUBA2qg7itNJrvQsIrMDfLhISJQqjekvS:kXXnDOzg7itNFjICfJJljeka

Score

1^/10

Malware Config

Signatures

Files

2c5fec5355440d18348c58d686a70ac0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

880c98d6bf5656974f2ad24ab005a4b2

Code Sign

3b:fe:58:02:9b:a5:2e:9d:4c:88:59:26:24:37:7d:a6
Certificate

Issuer

CN=a

Not Before

17-02-2013 10:29

Not After

31-12-2039 23:59

Subject

CN=a

Extended Key Usages

ExtKeyUsageCodeSigning

da:b6:55:46:19:53:b0:d6:07:09:df:57:ed:52:2b:47:48:50:6c:27
Signer

Actual PE Digest

da:b6:55:46:19:53:b0:d6:07:09:df:57:ed:52:2b:47:48:50:6c:27

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
GetCommandLineA
VirtualAllocEx

user32

LoadIconW
LoadIconA

gdi32

GetStockObject

advapi32

GetTokenInformation
RegOpenKeyW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegConnectRegistryW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
LookupAccountSidW

msvcrt

_XcptFilter
__CxxFrameHandler
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_iob
_wcsicmp
_wcsnicmp
_wgetcwd
_wtol
calloc
exit
fflush
fprintf
free
malloc
realloc
sprintf
strtok
wcschr
wcslen
wcsncmp
wcsncpy
wcsstr
wcstod
wcstok
wcstol

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata11
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata10
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata9
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata8
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata7
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata6
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata5
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

880c98d6bf5656974f2ad24ab005a4b2

Code Sign

3b:fe:58:02:9b:a5:2e:9d:4c:88:59:26:24:37:7d:a6Certificate

Extended Key Usages

da:b6:55:46:19:53:b0:d6:07:09:df:57:ed:52:2b:47:48:50:6c:27Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 25KB - Virtual size: 25KB

.data Size: 1024B - Virtual size: 920B

.rdata11 Size: 512B - Virtual size: 100B

.rdata10 Size: 512B - Virtual size: 100B

.rdata9 Size: 512B - Virtual size: 100B

.rdata8 Size: 512B - Virtual size: 100B

.rdata7 Size: 512B - Virtual size: 100B

.rdata6 Size: 512B - Virtual size: 100B

.rdata5 Size: 512B - Virtual size: 100B

.rdata4 Size: 512B - Virtual size: 100B

.rdata3 Size: 512B - Virtual size: 100B

.rdata2 Size: 512B - Virtual size: 100B

.data4 Size: 512B - Virtual size: 100B

.data3 Size: 512B - Virtual size: 100B

.data2 Size: 512B - Virtual size: 100B

.rsrc Size: 2KB - Virtual size: 2KB

3b:fe:58:02:9b:a5:2e:9d:4c:88:59:26:24:37:7d:a6
Certificate

da:b6:55:46:19:53:b0:d6:07:09:df:57:ed:52:2b:47:48:50:6c:27
Signer

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 25KB - Virtual size: 25KB

.data
Size: 1024B - Virtual size: 920B

.rdata11
Size: 512B - Virtual size: 100B

.rdata10
Size: 512B - Virtual size: 100B

.rdata9
Size: 512B - Virtual size: 100B

.rdata8
Size: 512B - Virtual size: 100B

.rdata7
Size: 512B - Virtual size: 100B

.rdata6
Size: 512B - Virtual size: 100B

.rdata5
Size: 512B - Virtual size: 100B

.rdata4
Size: 512B - Virtual size: 100B

.rdata3
Size: 512B - Virtual size: 100B

.rdata2
Size: 512B - Virtual size: 100B

.data4
Size: 512B - Virtual size: 100B

.data3
Size: 512B - Virtual size: 100B

.data2
Size: 512B - Virtual size: 100B

.rsrc
Size: 2KB - Virtual size: 2KB