b35885c2b965ddf47751bcc78a27b1a0_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b35885c2b965ddf47751bcc78a27b1a0_JaffaCakes118
Size

185KB
MD5

b35885c2b965ddf47751bcc78a27b1a0
SHA1

4dabfb6060a6f4dd3976edb05ff89c6d89144121
SHA256

3c8d896a780c6065eca4d2975c56af9dae78a73d22e5d299e428fce64abdee5c
SHA512

8ca88ec5811c60163341a135820b3ab924ef3a2dfff3ef51fff6f55bc1f8be9fd060f71ab5d0d0af6a706fdeb5348ff418fc49fbb67a68e1e41325249dc2c3b4
SSDEEP

3072:jmMMMTqnyGr3WupEt3Xb1HYjcwHFsLgzUJJ1Qx+jg/8ArJo9K:jmMMMTErPyXZHY1FsLgzAJGc0Jv

Score

1^/10

Malware Config

Signatures

Files

b35885c2b965ddf47751bcc78a27b1a0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

babc9801788a1eb750e1ae10e919a6fc

Code Sign

51:31:82:28:1b:07:33:b8:4a:75:e4:e4:b9:cb:7e:f6
Certificate

Issuer

CN=99818423945557345441449878765547442456928866767918827368261976484851898342761913594992196975363836497319382637632569255628795451453624967647616715124687429

Not Before

23-01-2013 18:13

Not After

31-12-2039 23:59

Subject

CN=99818423945557345441449878765547442456928866767918827368261976484851898342761913594992196975363836497319382637632569255628795451453624967647616715124687429

Extended Key Usages

ExtKeyUsageCodeSigning

a0:02:3b:1e:bb:06:54:13:fe:9b:3f:52:76:ea:a0:d4:41:0f:da:89
Signer

Actual PE Digest

a0:02:3b:1e:bb:06:54:13:fe:9b:3f:52:76:ea:a0:d4:41:0f:da:89

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryExA
VirtualAlloc

Sections

.text
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 314B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

babc9801788a1eb750e1ae10e919a6fc

Code Sign

51:31:82:28:1b:07:33:b8:4a:75:e4:e4:b9:cb:7e:f6Certificate

Extended Key Usages

a0:02:3b:1e:bb:06:54:13:fe:9b:3f:52:76:ea:a0:d4:41:0f:da:89Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 175KB - Virtual size: 174KB

.data Size: 512B - Virtual size: 314B

.rdata3 Size: 512B - Virtual size: 100B

.rdata2 Size: 512B - Virtual size: 100B

.rsrc Size: 2KB - Virtual size: 2KB

51:31:82:28:1b:07:33:b8:4a:75:e4:e4:b9:cb:7e:f6
Certificate

a0:02:3b:1e:bb:06:54:13:fe:9b:3f:52:76:ea:a0:d4:41:0f:da:89
Signer

.text
Size: 175KB - Virtual size: 174KB

.data
Size: 512B - Virtual size: 314B

.rdata3
Size: 512B - Virtual size: 100B

.rdata2
Size: 512B - Virtual size: 100B

.rsrc
Size: 2KB - Virtual size: 2KB