JaffaCakes118_26e2fc39420d52fed26109c13a67aef9

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_26e2fc39420d52fed26109c13a67aef9
Size

196KB
MD5

26e2fc39420d52fed26109c13a67aef9
SHA1

265e7beb3f215492ab44ac34c0df55e4fb59cc60
SHA256

6095958afca154c06cf7087ce1279afa9fb0921d281d3dc7dabfbdbd11a270d4
SHA512

2798cae2391a56852e9a1c64b381c23db37a07321675a8f55a5bb28a09333845a3bca7442b1ec3f964a01348da5e4b864bcb8ca01c0a25a363fe4bc65ddb57a2
SSDEEP

3072:letj81dibBYjyUgC87likUjFwkRlIHaG1kKv:71EtBCIi9lkXR

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_26e2fc39420d52fed26109c13a67aef9
.exe windows:4 windows x86 arch:x86

4ba127fe6eacb6b5853313f4b9c03263

Code Sign

69:d0:c8:ba:19:31:3f:73:bb:36:a5:a8:73:ac:d0:09
Certificate

Issuer

CN=797871756289634253896562428764717967153361673529868625515891451715252584769788918372438574322411216259565529928552691682658776517582536117728595793761

Not Before

17-07-2012 06:12

Not After

31-12-2039 23:59

Subject

CN=797871756289634253896562428764717967153361673529868625515891451715252584769788918372438574322411216259565529928552691682658776517582536117728595793761

Extended Key Usages

ExtKeyUsageCodeSigning

7f:08:cf:95:e5:9d:32:43:95:2f:4b:a2:59:f2:9b:ff:63:66:7b:2d
Signer

Actual PE Digest

7f:08:cf:95:e5:9d:32:43:95:2f:4b:a2:59:f2:9b:ff:63:66:7b:2d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatW
GetModuleHandleA
GetProcAddress
CreateFileW
GetWindowsDirectoryW
VirtualAllocEx

user32

LoadIconA

advapi32

RegOpenKeyW
RegCloseKey

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ba127fe6eacb6b5853313f4b9c03263

Code Sign

69:d0:c8:ba:19:31:3f:73:bb:36:a5:a8:73:ac:d0:09Certificate

Extended Key Usages

7f:08:cf:95:e5:9d:32:43:95:2f:4b:a2:59:f2:9b:ff:63:66:7b:2dSigner

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 152KB - Virtual size: 151KB

.data Size: 40KB - Virtual size: 40KB

.data2 Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 220B

69:d0:c8:ba:19:31:3f:73:bb:36:a5:a8:73:ac:d0:09
Certificate

7f:08:cf:95:e5:9d:32:43:95:2f:4b:a2:59:f2:9b:ff:63:66:7b:2d
Signer

.text
Size: 152KB - Virtual size: 151KB

.data
Size: 40KB - Virtual size: 40KB

.data2
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 220B