3871f1706044927977685a6d1a0275f9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3871f1706044927977685a6d1a0275f9_JaffaCakes118
Size

265KB
MD5

3871f1706044927977685a6d1a0275f9
SHA1

39e9aea5a68ab2349d7d9f8ffc2796b4b7bf9089
SHA256

00abf2ea3f410e696e34e1762ec3a5fad02dc2b22288f969a5f7d8a06eb25caf
SHA512

064027c2987e2a8cee35e89e9338775a865f4efd769c4964eaca159b00923da11a9e7f2cd2375bbfca13675726d1670ba4c94ad6b68c61ae107e7062a2c36a93
SSDEEP

6144:RGQ0ULoVUb/QDbBaC5uBEKS8qxFGqcDtE9loKma:RHoWb/YEC+h4FDAEPvma

Score

1^/10

Malware Config

Signatures

Files

3871f1706044927977685a6d1a0275f9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d0508cd7ffd22508cb33c1df33348166

Code Sign

40:92:f1:63:97:44:63:8e:4e:0c:15:08:a2:42:fc:2c
Certificate

Issuer

CN=a

Not Before

04-02-2013 16:01

Not After

31-12-2039 23:59

Subject

CN=a

Extended Key Usages

ExtKeyUsageCodeSigning

d9:df:86:1a:f8:29:0c:23:dc:bf:b0:8e:4d:47:8d:54:9b:13:bb:f4
Signer

Actual PE Digest

d9:df:86:1a:f8:29:0c:23:dc:bf:b0:8e:4d:47:8d:54:9b:13:bb:f4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetSystemTimeAsFileTime
GetTickCount
LeaveCriticalSection
GetCurrentProcess
QueryPerformanceCounter
SetConsoleCtrlHandler
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
GetProcAddress
FormatMessageA
ExpandEnvironmentStringsA
LocalFree
EnterCriticalSection

user32

CloseClipboard
CopyRect
CreateWindowExW
DefDlgProcW
DefWindowProcW
DeleteMenu
DialogBoxParamW
DrawEdge
DrawFocusRect
DrawIcon
DrawMenuBar
EnableWindow
EndDialog
EndPaint
GetActiveWindow
GetClipboardData
GetDC
GetDlgCtrlID
GetDlgItem
GetFocus
GetMenu
CharPrevW
GetSystemMetrics
GetWindowLongW
GetWindowRect
GetWindowTextW
InflateRect
InvalidateRect
IsIconic
IsWindow
KillTimer
LoadAcceleratorsW
LoadCursorW
LoadIconW
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
MoveWindow
OpenClipboard
PeekMessageW
RegisterClassW
RegisterWindowMessageW
ReleaseDC
RemoveMenu
RemovePropW
SetClassLongW
SetCursor
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetPropW
SetRect
SetTimer
SetWindowLongW
SetWindowTextW
ShowWindow
wsprintfW
wvsprintfW
UpdateWindow
CreateWindowExA
LoadIconA
CharNextW
CallWindowProcW
BeginPaint
GetMenuStringW

gdi32

GetStockObject

advapi32

RegOpenKeyExA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 246KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0508cd7ffd22508cb33c1df33348166

Code Sign

40:92:f1:63:97:44:63:8e:4e:0c:15:08:a2:42:fc:2cCertificate

Extended Key Usages

d9:df:86:1a:f8:29:0c:23:dc:bf:b0:8e:4d:47:8d:54:9b:13:bb:f4Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 246KB - Virtual size: 246KB

.data Size: 512B - Virtual size: 144B

.rdata4 Size: 1024B - Virtual size: 1000B

.rdata3 Size: 1024B - Virtual size: 1000B

.rdata2 Size: 1024B - Virtual size: 1000B

.rsrc Size: 2KB - Virtual size: 2KB

40:92:f1:63:97:44:63:8e:4e:0c:15:08:a2:42:fc:2c
Certificate

d9:df:86:1a:f8:29:0c:23:dc:bf:b0:8e:4d:47:8d:54:9b:13:bb:f4
Signer

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 246KB - Virtual size: 246KB

.data
Size: 512B - Virtual size: 144B

.rdata4
Size: 1024B - Virtual size: 1000B

.rdata3
Size: 1024B - Virtual size: 1000B

.rdata2
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 2KB - Virtual size: 2KB