665d798ace2aecd67bebeef22bb3bd33_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

665d798ace2aecd67bebeef22bb3bd33_JaffaCakes118
Size

125KB
MD5

665d798ace2aecd67bebeef22bb3bd33
SHA1

c9c7085cb865ef7b177e9b0fe2994be5551ed6d1
SHA256

3c0a690c5abdbbf6975ba747e6cd7cafeb18f8711b3642dd134c6cce1ba7bcec
SHA512

3a808e5d6ff0ab5dfcf1bccc9643a5c451a2b5b4172123272e2c6117a75821e52665e4297e6a67d5c50055494c0a6cf51d51312ace3f8aed2ca869746eb00aaa
SSDEEP

3072:TLldNI2dZfOb2cQt7rXtSIa+E5K+G09tO9nZGXe:TLTNI2dxLcQtZJa+E5UWt+ZGO

Score

1^/10

Malware Config

Signatures

Files

665d798ace2aecd67bebeef22bb3bd33_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f5fdcf4aad4901bdb422dcd5c069c4a1

Code Sign

0a:71:cc:ed:6f:9f:dd:55:b7:ac:1b:e1:35:42:dc:f3
Certificate

Issuer

CN=a

Not Before

04-02-2013 16:14

Not After

31-12-2039 23:59

Subject

CN=a

Extended Key Usages

ExtKeyUsageCodeSigning

7b:ec:00:ce:7e:ab:ce:cf:51:2a:0c:2f:59:94:70:77:01:1c:71:e8
Signer

Actual PE Digest

7b:ec:00:ce:7e:ab:ce:cf:51:2a:0c:2f:59:94:70:77:01:1c:71:e8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
VirtualAlloc
OpenProcess
LocalUnlock
InitializeCriticalSectionAndSpinCount
FindFirstChangeNotificationW
CreateSemaphoreW
CreateMutexW

gdi32

GetStockObject

advapi32

GetUserNameW
RegSetValueExW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey

msvcrt

_XcptFilter
__dllonexit
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
_abnormal_termination
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_filelength
_getpid
_initterm
_iob
_mbscmp
_mbscpy
_mbsicmp
_mbsinc
_mbslen
_mbslwr
_mbsnbcmp
_mbsnbicmp
_onexit
_snwprintf
_vsnprintf
_vsnwprintf
_wcmdln
_wcsdup
_wcsicmp
_wcsnicmp
_wcsrev
_wfopen
clearerr
exit
fclose
fflush
fread
ftell
fwprintf
fwrite
isspace
iswctype
memmove
setlocale
time
wcschr
wcscmp
wcscpy
wcslen
wcsncmp
wcsrchr
wcstok
memcpy

Sections

.text2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5fdcf4aad4901bdb422dcd5c069c4a1

Code Sign

0a:71:cc:ed:6f:9f:dd:55:b7:ac:1b:e1:35:42:dc:f3Certificate

Extended Key Usages

7b:ec:00:ce:7e:ab:ce:cf:51:2a:0c:2f:59:94:70:77:01:1c:71:e8Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

advapi32

msvcrt

Sections

.text2 Size: 512B - Virtual size: 100B

.text Size: 115KB - Virtual size: 114KB

.data Size: 1024B - Virtual size: 708B

.data2 Size: 512B - Virtual size: 100B

.rsrc Size: 1024B - Virtual size: 976B

0a:71:cc:ed:6f:9f:dd:55:b7:ac:1b:e1:35:42:dc:f3
Certificate

7b:ec:00:ce:7e:ab:ce:cf:51:2a:0c:2f:59:94:70:77:01:1c:71:e8
Signer

.text2
Size: 512B - Virtual size: 100B

.text
Size: 115KB - Virtual size: 114KB

.data
Size: 1024B - Virtual size: 708B

.data2
Size: 512B - Virtual size: 100B

.rsrc
Size: 1024B - Virtual size: 976B