40f6fd46389965d38e40bce3c6210782_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

40f6fd46389965d38e40bce3c6210782_JaffaCakes118
Size

55KB
MD5

40f6fd46389965d38e40bce3c6210782
SHA1

d55036ed09961bdfb6cf4544391451eed7874822
SHA256

046aa91d2adb4d6d45cb275b7def45f11bd8e4213d9326df79227a9261aec8d8
SHA512

db614e4da999b02215918c6537052c84b7e3a8e61877cc2b3426231cdca0a42c50db4c0a17e664ded6134b2db599593da4e41b27afa8fb776110a607bbc63462
SSDEEP

768:zz8ghp2cDxbjsn8mt9JG1JC2N+vrjPCNRB4JbmhuJKa5wih/:zgg/D1In8mrKAvKNRB4zJKaX

Score

1^/10

Malware Config

Signatures

Files

40f6fd46389965d38e40bce3c6210782_JaffaCakes118
.exe windows:5 windows x86 arch:x86

19e24bfe9af1baca3badeb6369fd7f76

Code Sign

60:54:b6:24:48:53:9d:47:ba:44:f3:ba:93:4e:25:ad
Certificate

Issuer

CN=IvWPdEJgZleFQ2pvkpv6NyoLL

Not Before

23/04/2012, 13:55

Not After

31/12/2039, 23:59

Subject

CN=IvWPdEJgZleFQ2pvkpv6NyoLL

Extended Key Usages

ExtKeyUsageCodeSigning

0f:08:6b:20:7b:a1:ad:c3:54:a9:8b:5f:ce:e5:78:93:9c:7f:3b:de
Signer

Actual PE Digest

0f:08:6b:20:7b:a1:ad:c3:54:a9:8b:5f:ce:e5:78:93:9c:7f:3b:de

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
VirtualAlloc
GetWindowsDirectoryW
lstrcatW

advapi32

RegCloseKey
RegOpenKeyExW

msvcrt

memcpy

Sections

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 306B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 274B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19e24bfe9af1baca3badeb6369fd7f76

Code Sign

60:54:b6:24:48:53:9d:47:ba:44:f3:ba:93:4e:25:adCertificate

Extended Key Usages

0f:08:6b:20:7b:a1:ad:c3:54:a9:8b:5f:ce:e5:78:93:9c:7f:3b:deSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

msvcrt

Sections

.text2 Size: 1024B - Virtual size: 1000B

.text3 Size: 1024B - Virtual size: 1000B

.text Size: 48KB - Virtual size: 48KB

.rdata Size: 512B - Virtual size: 306B

.data Size: 512B - Virtual size: 252B

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 512B - Virtual size: 274B

60:54:b6:24:48:53:9d:47:ba:44:f3:ba:93:4e:25:ad
Certificate

0f:08:6b:20:7b:a1:ad:c3:54:a9:8b:5f:ce:e5:78:93:9c:7f:3b:de
Signer

.text2
Size: 1024B - Virtual size: 1000B

.text3
Size: 1024B - Virtual size: 1000B

.text
Size: 48KB - Virtual size: 48KB

.rdata
Size: 512B - Virtual size: 306B

.data
Size: 512B - Virtual size: 252B

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 512B - Virtual size: 274B