4359cccce5df74a1b6723f3456b6c009_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4359cccce5df74a1b6723f3456b6c009_JaffaCakes118
Size

426KB
MD5

4359cccce5df74a1b6723f3456b6c009
SHA1

64f0e292e3fa5c2f371fa5001fdba4a26dff4dd9
SHA256

c3cafc0011e9f24eb940c223050515490bbc652f64bd60fdf78a52ef9f60d59d
SHA512

d7318555609ba3a5d8e56fd10883915906287818c0c307617f53c145b3d6f3e7a72924ddb9bf99acd00778d577b951e63495b450a1fab33fa221fcaaf1141542
SSDEEP

6144:D4BRWlDIIi9ILOx/X0YtQoPi7WWPvWacvSAjkzmIaVcUn9OGaiKBu12:mRWlEIwc2/OoaWceaEpMdoaiKV

Score

1^/10

Malware Config

Signatures

Files

4359cccce5df74a1b6723f3456b6c009_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0438b48d0f92a4632ca6d90747d34721

Code Sign

33:77:3f:be:c8:90:ee:64:b3:d9:40:45:a9:61:39:a0
Certificate

Issuer

CN=V9tkjWrRJqRsU382xSgDwxPogTm8ScP6khel5ZskMbtf6ojypJssw8BsXaQ2kPIsEE3LV4LTvLY9b4kNbwO1CekgD5TIO21x54R1KE5GTtJvwhVPVlgJUUY5DLnYl1c6xUDtLrFbIi4vJko8uVNVGr7E726rccijLinnqehhvOmfMItAsIqMBdJ3ZkZFU9SKgW6Tu2ghBl2LQ6wteMcqwKsMZKZ9mA2qihR7ZWrV5NwYpfntYPbSDNnNC52eFonIWkMYhickQMjHe9pHGfu5qf9o8J7ddA2r4NWpUvrZyxSG

Not Before

26/10/2012, 20:40

Not After

31/12/2039, 23:59

Subject

CN=V9tkjWrRJqRsU382xSgDwxPogTm8ScP6khel5ZskMbtf6ojypJssw8BsXaQ2kPIsEE3LV4LTvLY9b4kNbwO1CekgD5TIO21x54R1KE5GTtJvwhVPVlgJUUY5DLnYl1c6xUDtLrFbIi4vJko8uVNVGr7E726rccijLinnqehhvOmfMItAsIqMBdJ3ZkZFU9SKgW6Tu2ghBl2LQ6wteMcqwKsMZKZ9mA2qihR7ZWrV5NwYpfntYPbSDNnNC52eFonIWkMYhickQMjHe9pHGfu5qf9o8J7ddA2r4NWpUvrZyxSG

Extended Key Usages

ExtKeyUsageCodeSigning

28:7c:6a:e5:b1:7c:05:98:5e:5f:2f:a1:08:3c:d1:a2:c9:d9:7f:12
Signer

Actual PE Digest

28:7c:6a:e5:b1:7c:05:98:5e:5f:2f:a1:08:3c:d1:a2:c9:d9:7f:12

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
ExitProcess
VirtualAlloc
VirtualFree
lstrcmpiW
lstrlenW
FormatMessageW
lstrcatW
GetCurrentProcess
SetPriorityClass
GetCommandLineW
GetStartupInfoW
GetModuleHandleW
GetLocaleInfoW
InitializeCriticalSection
CreateMutexW
LoadLibraryW
GetProcAddress
CreateThread
ReleaseMutex
FreeLibrary
SetProcessShutdownParameters
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
CloseHandle
GetCurrentDirectoryW
GetLastError
GetCurrentThreadId
lstrcpynW
LocalFree
LocalAlloc
lstrcpyW
GetProcessHeap
MultiByteToWideChar
GetThreadTimes
OpenProcess
GetPriorityClass
GetCurrentProcessId
SetProcessAffinityMask
GetProcessAffinityMask
TerminateProcess
CreateProcessW
VerifyVersionInfoW
HeapFree
HeapReAlloc
HeapAlloc
SetEvent
CreateEventW
lstrcmpW
DeleteCriticalSection
LoadLibraryA
GetVersionExA
GetNumberFormatW

user32

GetKeyState
IsRectEmpty
LoadStringA
LoadCursorFromFileW
ChangeDisplaySettingsExA
EditWndProc
CharUpperBuffW
UnregisterHotKey
GetCursorPos
DeferWindowPos
CharToOemBuffA
CreateMenu
InsertMenuW
CloseDesktop

gdi32

CreateSolidBrush
SelectObject
BitBlt
CreatePen
GetStockObject
FillRgn
SetRectRgn
CombineRgn
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
MoveToEx
DeleteDC
LineTo
DeleteObject
GetDeviceCaps
CreateRectRgn

advapi32

RegOpenKeyExA

comctl32

ImageList_SetIconSize
ImageList_ReplaceIcon
ImageList_Create
CreateStatusWindowW
ImageList_Remove

Sections

.text
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0438b48d0f92a4632ca6d90747d34721

Code Sign

33:77:3f:be:c8:90:ee:64:b3:d9:40:45:a9:61:39:a0Certificate

Extended Key Usages

28:7c:6a:e5:b1:7c:05:98:5e:5f:2f:a1:08:3c:d1:a2:c9:d9:7f:12Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

Sections

.text Size: 408KB - Virtual size: 408KB

.data Size: 12KB - Virtual size: 12KB

.data2 Size: 1024B - Virtual size: 1000B

.reloc Size: 1024B - Virtual size: 536B

33:77:3f:be:c8:90:ee:64:b3:d9:40:45:a9:61:39:a0
Certificate

28:7c:6a:e5:b1:7c:05:98:5e:5f:2f:a1:08:3c:d1:a2:c9:d9:7f:12
Signer

.text
Size: 408KB - Virtual size: 408KB

.data
Size: 12KB - Virtual size: 12KB

.data2
Size: 1024B - Virtual size: 1000B

.reloc
Size: 1024B - Virtual size: 536B