369b119123a37840513b969a29dd6776_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

369b119123a37840513b969a29dd6776_JaffaCakes118
Size

303KB
MD5

369b119123a37840513b969a29dd6776
SHA1

307dd46a8815d8a97d6a5b17e03c8535fe2fe330
SHA256

ebf34aa56fa11bffcf1f049b72c098d447d505909a86b16d6025cd47b6e97313
SHA512

8bc8ddd8f117e070466667e0eaa00017fa3d6bd85df6679cd9574a4c6a4076c7fac11cc2cfc52b56892289882b5e0f7f64c2096e161c4d48c5526eaef23f20b3
SSDEEP

6144:3t9MuK7K47+46NvC24o3VO7fy9JThvCFZL4w9rG8FzaS:9eHK47+M2hmZp9rp3

Score

1^/10

Malware Config

Signatures

Files

369b119123a37840513b969a29dd6776_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fad484b1c3dade62a8a215176045192a

Code Sign

06:fd:4f:9e:33:b5:3b:45:b6:2d:ac:a3:90:73:28:77
Certificate

Issuer

CN=79229296999227849252775292238874537894986721514254149244922311483581745953811599942965176938732419549571451554395278282964751258649638386159866553997462343

Not Before

17/01/2013, 15:44

Not After

31/12/2039, 23:59

Subject

CN=79229296999227849252775292238874537894986721514254149244922311483581745953811599942965176938732419549571451554395278282964751258649638386159866553997462343

Extended Key Usages

ExtKeyUsageCodeSigning

a1:89:33:f6:7a:93:f9:fb:f2:2e:f0:26:aa:71:ff:79:f6:06:7a:12
Signer

Actual PE Digest

a1:89:33:f6:7a:93:f9:fb:f2:2e:f0:26:aa:71:ff:79:f6:06:7a:12

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
LoadLibraryExA
GetProcAddress
VirtualAlloc

user32

LoadIconW
RegisterClassExA
LoadIconA
LoadCursorA

gdi32

GetStockObject

msvcrt

memset

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 277KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fad484b1c3dade62a8a215176045192a

Code Sign

06:fd:4f:9e:33:b5:3b:45:b6:2d:ac:a3:90:73:28:77Certificate

Extended Key Usages

a1:89:33:f6:7a:93:f9:fb:f2:2e:f0:26:aa:71:ff:79:f6:06:7a:12Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

Sections

.text Size: 16KB - Virtual size: 15KB

.text2 Size: 1KB - Virtual size: 1KB

.data Size: 277KB - Virtual size: 276KB

.rsrc Size: 2KB - Virtual size: 2KB

06:fd:4f:9e:33:b5:3b:45:b6:2d:ac:a3:90:73:28:77
Certificate

a1:89:33:f6:7a:93:f9:fb:f2:2e:f0:26:aa:71:ff:79:f6:06:7a:12
Signer

.text
Size: 16KB - Virtual size: 15KB

.text2
Size: 1KB - Virtual size: 1KB

.data
Size: 277KB - Virtual size: 276KB

.rsrc
Size: 2KB - Virtual size: 2KB