372af5396aaffc4f9a794c668699f542_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

372af5396aaffc4f9a794c668699f542_JaffaCakes118
Size

199KB
MD5

372af5396aaffc4f9a794c668699f542
SHA1

fe3bf5c51900c19749c356dfbbceb9fd55b1e700
SHA256

bfab48cd2942952b961083442c81db67708bbbc7c25b786b55754c41ba6d1715
SHA512

d2154b3d63bc4406f80457d4f7cf804d764a22e4668c9ada00ea2931fbb0ac496cabb529bcecf134bbc6b51e0091986788bc7ac35557b33e36b9a68ab1d9bfa8
SSDEEP

3072:DJJoQwiWO7OHEhqvgeFxrE/t0d/OGsSv+6nApiqf/LbCAQK977:796zgeFyWOGs2nA8qfaAp93

Score

1^/10

Malware Config

Signatures

Files

372af5396aaffc4f9a794c668699f542_JaffaCakes118
.dll windows:5 windows x86 arch:x86

f2d6285216c4cd9d868a56a5098ffe3c

Code Sign

32:bf:48:49:9e:5b:eb:92:4e:89:ef:44:e4:3d:27:94
Certificate

Issuer

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

Not Before

27-11-2012 05:26

Not After

31-12-2039 23:59

Subject

CN=CCABAH1B233BG2EHCCADBCDG1BBG3FHD3BEGD2G31AEEAFF3D2CBCBCCBH3FBDHGDG32H3F3FE32CA3DDF31B2AGAE2G31GCAHAG1AHFCEECGD13113EGDHAAG1HC1HADAGEFH22DHHECFF3HG2EG1GH13E22AGEC22FA1AABHC11F1C23CGD2EFA3DF2GCGDG1BF32HF3111G2C11D1BBF33AACF3BF22C3DFAGABHDA1EEF3GEDEEHDA3BBEBAH322A2A331FEGDFA2GD2GBA22FGECFDGFFGADDE2AGDEECF2BGFA1C3FGB3GGGEGFA1AAFEE2DFB2AC1FCDBHB2FFFDF2CFCFCAEB1FAHFADCG2CFEHEE2ACAE1BC13CBF2E11GFBAAECFCFHEEGD3ACDHB21AHEGGECD3A12HD1G2DHADCGGGAGCBEE1D3CHC3FCBFBACHBADGGCD3H3CDCCEEHHGD33AGABFDCDF311123GGAEAB22EFG3CAAFG2FA2B1HDE123BFBBFBF111AHD1FAHEHEEE3CFA3A1GB2FBCFCEBAG22D1DDBAFC2EDFEEEBDG2FAF2EACCFBBBFFHGEGAFEB12GHDHBG2AACFCDHH2ED1A23CAAHCAE3E2HEF312FCECDAGABEHBCGEBC13HGEB2BHBBD2F2H1C3AHEE22GC22GB232DH3D2333H2EHBCGFG1231DCFDFHFGBGAC1HE2H2C123CHFHHE1HBGABDEFAD3CHACE21BF3CGDDAAE3D13GGDGFAH2GGDC2FEHDE2DC2CAH12BCCF1H1HE22C3B2CDAE3EABHB12BCH233CHBCC3CA1HH1AEAG2BB2HGABHHHFDEABFA1H3ADB1AF2AF2F2CGHCCAE11GDAFFHFADD331CCEECC1EBEH1C2CCA33GD12CBH1BH3BABCADEA322AEHDGEAD2C23G3AHEEF11AEFB2DGHFC32ABDDHGEBBD3BBAG2GAD21HA2HGDCGB1CCDA1FEFDBE3GGEECBDF2CDFG2E2GB21A2FB3C323EEHDAGEFCE2CBGGAAF22AEDEEBDC2A2C3BGCC2AHCBHC3BCBADFH1E3CC1CDEE2EDA2GFC2F211B3GDFA2G31A3CCB1EDDB1ED2ACCC1AGEBB3FHDAEA3BACGCGCC1ACB2H1EB1CBBDCEB3E1312EEH1H3H1CEB2332BH1AEF23EDEF2D3BEHAEDBHHEED1FE3H A11G1C1BFD A11G1C1BFD

Extended Key Usages

ExtKeyUsageCodeSigning

cf:e1:da:1d:51:98:63:b5:9a:a0:92:75:1b:2b:ac:f6:35:98:6f:07
Signer

Actual PE Digest

cf:e1:da:1d:51:98:63:b5:9a:a0:92:75:1b:2b:ac:f6:35:98:6f:07

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

advapi32

RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyA
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW

msvcrt

_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_stricmp
exit
swprintf
vswprintf
wcslen

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f2d6285216c4cd9d868a56a5098ffe3c

Code Sign

32:bf:48:49:9e:5b:eb:92:4e:89:ef:44:e4:3d:27:94Certificate

Extended Key Usages

cf:e1:da:1d:51:98:63:b5:9a:a0:92:75:1b:2b:ac:f6:35:98:6f:07Signer

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 183KB - Virtual size: 183KB

.data Size: 512B - Virtual size: 200B

.rsrc Size: 1024B - Virtual size: 976B

.reloc Size: 1024B - Virtual size: 716B

32:bf:48:49:9e:5b:eb:92:4e:89:ef:44:e4:3d:27:94
Certificate

cf:e1:da:1d:51:98:63:b5:9a:a0:92:75:1b:2b:ac:f6:35:98:6f:07
Signer

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 183KB - Virtual size: 183KB

.data
Size: 512B - Virtual size: 200B

.rsrc
Size: 1024B - Virtual size: 976B

.reloc
Size: 1024B - Virtual size: 716B