561f727b9e4f8cfa73754660b76c1904_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

561f727b9e4f8cfa73754660b76c1904_JaffaCakes118
Size

187KB
MD5

561f727b9e4f8cfa73754660b76c1904
SHA1

fa3723b43113a14fb10c83b9938b55b8afe12a58
SHA256

9ec22697f7eb1e27ce0b84e09a787c3c5c10199912f453c827a118f8643828e2
SHA512

ae8fb3259226547105d34adcc6199f3ce751053a8460eebabac7c762af9108da652ca3d36f0a611850c1540d86474ecac896c61d89860737be6c142542466910
SSDEEP

3072:eQXC97z4195epaT2XLNGOCiWCb554Dl3bie/gU5jh5d:eQSkkpaaXjCiOdie/7

Score

1^/10

Malware Config

Signatures

Files

561f727b9e4f8cfa73754660b76c1904_JaffaCakes118
.dll windows:5 windows x86 arch:x86

acc3c106c4d1879996acefaf355a129c

Code Sign

60:9e:e9:31:53:bf:82:91:4b:d1:d6:4b:8b:2d:d6:95
Certificate

Issuer

CN=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

Not Before

09/10/2012, 11:09

Not After

31/12/2039, 23:59

Subject

CN=6EtQP8qJuQjljYItSe8Z7Z1h32CppPbhoHx7fAcmFDnBhvpuXC45Q8NOwRWGTavfWDKyeWkEuALhIBvPiC58SFwXWrXWfu3M8Lrsde2ggZUpFoW3sJTi762rrMXAvVQ3JMIKCmNZOxXKdTRQyS1jvNr7CgZFLpdjbQr2W9oNzlTGq2L7epIB4391BGVSbQK1ksiyFkPMqSqetEmRF22gN2Ql7hnBQ2mNExJdmyudO655vuGizRPZLPwqlCKRYCao8tYzznVwJhaAKc3IauIe3tpM1KgkOgDHeX3QSf5iG9KMpk1DdP6XKP35r6PlzrvPZbJUWv5gIRIiLlsI2gaV2Ke8puhSwzLZZGBiqrojoVGs6BxKrxRt4W3Sfa5B1XHAlsZcZeLuOj6fKoFIMOWB31TtQLANmST8CP5qoUcZClai4SAHZFV1fwqcAlSrUqdk2BKwnwZeXLQRqbf1s691TSztpmP98DJ3eXIBIUJEyLVWhfW58uFAjryVLG8bptVisvsvfTgZCUY62ZetwBnnQsQiEzcseMsdrdeGObJ3UaiBdfVWDFUFQ6htCHfA4kj9uu5hhnyOJS1miFbp1iIqHpRxGaiNtKJzp9O2AYrqTS2VQVmTKuZfRmYIsr7YZEh8xo4qEqmcKmZyrwaErEKoLOen3qhHfuKBLRdvs3BzbSo7GTx1eCKNUAw47r9aPEhVuzo4Z5HbCtr8cnIwNCy2Ol4sPaOeorceDXBtkEtKYxaNFcfRljvk2GioUHeqD2dKHSwNvO2fLTmZNvURBHJy97YSBC4UgwfVFyHMDwMJYLCcjnOxQg8iK196FNMy2Wxj5EqLQEnrbNjAXLj1RPnJxJ6lqBEPIcADYeKNiWMLoZyXyw3B1HVI9sr6HKGR76bNZJxyb5eggOiOVrWM7w4Lil3XSoJv6ooPe4roIDdDT6dgUcfazmL4Io4JQ5mavGzVluQia7yKY7P7pnpvkIRqczVn2LXYgxmswGYUOSkCIvoMlsdLOsXkwGnWpPGJipDUvJOzYfSpNmXoEQI22SpUyxoJs2uPzBDXw96eZpRsw8mHkRgwuHmZ7Jg7ew5n5qOrnPowhtbgDHd6oIsEe1KZ8RwFfVX6R1Wkl5ZHdt4rvnTFQvdZQki3wo47BdroYr3JjC3JekXOXNA9OgGfrzuTfHXlVLxjvGrXDzpcPPFko8gSoUlgE3CXh3Emnp9zADJuesJlvLd6IPDWHiV6FvIlFEPnClRxm6ORwdv4NKVnnOf1UatUb5EKrArJRa8e1JPTubVVhkqClqorfah4qj2zHQIVRU6kKaftD63bwWAn8m8eTPU2a9fSxnfCTZLaQSMGZ8BDcYAoMKl2bEhtHWul8VMDLhRIzkqJ7PdSUHSzR9FcmYtcStIlChsVMWXEdMu37ac4qgdXusxFK6X93TGRf1CDQHmg8ww8BvI3pKzKi5a6Iast5MVBeGW3my8wHDoGKCGkDahjqJvKFhVqr7JTQJmzeYb1jcezeHN3TmSaAAmBZrEr3hdGou5QVPa3p8qOhlx21ahY1dgeayd8o5dEddBBspvwsiHyCx9JOhAAszyTEpocvHo4F3JKkls2Ws28zGHhdieYd3lvYHmAVLcS94vmBKZPqgF1VAYs5JTi6qwDG6tkJhOI5egDS6UNrh8Q2uDHn3APtTKvk4rCyDhOVqDYgiMuz1gqLY265wz3d5w1x5cSvGk8bqxTpDV7sOaFx6kocpnxJW3FWr1AhFxdmVa7tOwxJZcHihtZLQQ6YVlGeqns3cgi1wWrdYqi7J3NtmdXPT5DrPeU4a8jAkAhIHFTPCmyiaDl7A32wvuf7SgPdHk99vrG7SlD9GM92gdVJBhxWwH8yIOEp1l7wAuKOniYpuWy5VhiovXyiIHIOm39sXPv3Pdjvn6ovLTVh2CiGIYJILIyvgRNckINAUQSU3DuLFs6shiYK7VqtfhkLgYLtMdDwUqELp558LcvuhFzeZhDNE9TgCSObUNK

Extended Key Usages

ExtKeyUsageCodeSigning

a0:6d:cd:42:ba:59:4e:81:c2:53:d0:0e:a5:36:f3:da:12:9f:cf:e7
Signer

Actual PE Digest

a0:6d:cd:42:ba:59:4e:81:c2:53:d0:0e:a5:36:f3:da:12:9f:cf:e7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
GetTempPathA
WriteFile
lstrlenA
CreateFileA
GetProcAddress
GetModuleHandleA
CreateFileW
SetFilePointer
CloseHandle

advapi32

RegOpenKeyW

ole32

DoDragDrop
OleInitialize
OleUninitialize
CoGetMalloc

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 670B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

acc3c106c4d1879996acefaf355a129c

Code Sign

60:9e:e9:31:53:bf:82:91:4b:d1:d6:4b:8b:2d:d6:95Certificate

Extended Key Usages

a0:6d:cd:42:ba:59:4e:81:c2:53:d0:0e:a5:36:f3:da:12:9f:cf:e7Signer

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 167KB - Virtual size: 167KB

.rdata Size: 512B - Virtual size: 488B

.data Size: 512B - Virtual size: 540B

.data2 Size: 1024B - Virtual size: 1000B

.rsrc Size: 1024B - Virtual size: 656B

.reloc Size: 1024B - Virtual size: 670B

60:9e:e9:31:53:bf:82:91:4b:d1:d6:4b:8b:2d:d6:95
Certificate

a0:6d:cd:42:ba:59:4e:81:c2:53:d0:0e:a5:36:f3:da:12:9f:cf:e7
Signer

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 167KB - Virtual size: 167KB

.rdata
Size: 512B - Virtual size: 488B

.data
Size: 512B - Virtual size: 540B

.data2
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 1024B - Virtual size: 656B

.reloc
Size: 1024B - Virtual size: 670B