JaffaCakes118_2571eec37563f27453325f1264653b93

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_2571eec37563f27453325f1264653b93
Size

119KB
MD5

2571eec37563f27453325f1264653b93
SHA1

f6c3f0c0e24d78068dc98dfeec04724586d79e91
SHA256

b21e0e85cecd1a41ff245ebac534e6d0d68043d6c0074baf7e2e0ee574e25464
SHA512

b3c417c9e8de4fa27d08216a3d29ad996bfa06f42a7f4289fbaebb7bf0a601d1dceb8f5804ab0b6573460e270247acf967daf19058b239047ce05b43ab63b7f7
SSDEEP

1536:zu3d0xRF9ke8NEjrNWOxgaYgcLe9IOato4xnY+cPm5qihG2BGKGobCoHG5GXeZ:i5EWigaYxLY8iWcPm1G2ULpSeZ

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_2571eec37563f27453325f1264653b93
.exe windows:4 windows x86 arch:x86

641f55d89cd96b75c8269e4a5e7be8ae

Code Sign

57:a1:37:6d:14:73:eb:b7:47:f4:24:66:fe:32:28:82
Certificate

Issuer

CN=RLrE

Not Before

23-05-2012 16:13

Not After

31-12-2039 23:59

Subject

CN=RLrE

Extended Key Usages

ExtKeyUsageCodeSigning

e4:30:93:e8:ad:eb:c3:46:f3:b2:10:d3:cc:5d:ec:86:8e:ea:51:1b
Signer

Actual PE Digest

e4:30:93:e8:ad:eb:c3:46:f3:b2:10:d3:cc:5d:ec:86:8e:ea:51:1b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
lstrcatW
CreateFileW
CloseHandle
VirtualAllocEx
WriteFile
GetModuleHandleW
GetProcAddress

advapi32

RegCloseKey

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

641f55d89cd96b75c8269e4a5e7be8ae

Code Sign

57:a1:37:6d:14:73:eb:b7:47:f4:24:66:fe:32:28:82Certificate

Extended Key Usages

e4:30:93:e8:ad:eb:c3:46:f3:b2:10:d3:cc:5d:ec:86:8e:ea:51:1bSigner

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 14KB - Virtual size: 13KB

.data Size: 97KB - Virtual size: 97KB

.data4 Size: 1024B - Virtual size: 1000B

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 1024B - Virtual size: 1000B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 172B

57:a1:37:6d:14:73:eb:b7:47:f4:24:66:fe:32:28:82
Certificate

e4:30:93:e8:ad:eb:c3:46:f3:b2:10:d3:cc:5d:ec:86:8e:ea:51:1b
Signer

.text
Size: 14KB - Virtual size: 13KB

.data
Size: 97KB - Virtual size: 97KB

.data4
Size: 1024B - Virtual size: 1000B

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 172B