JaffaCakes118_3c04a5bb5600613fd29b03c08af6f891

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_3c04a5bb5600613fd29b03c08af6f891
Size

196KB
MD5

3c04a5bb5600613fd29b03c08af6f891
SHA1

2890fdcdd9162e3c74c3e2e268e32b0ae556bd64
SHA256

463481e895a26addd0648fbe3e59e2dd7b78d33baff0ef0e74f3ac056eb6678f
SHA512

e0cefa75bee9643d29207573ba91cc4b013a0ac9deb6320294e523b425bd31f6134c4052ad11658f2140272a1c0dedab09863cdfaeb000d5d7a096c0945a0beb
SSDEEP

3072:PknR+1TSRhN3Kxig3hlikUjFro1W5aG1kKj:x1Ohuiwi+kX9

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_3c04a5bb5600613fd29b03c08af6f891
.exe windows:4 windows x86 arch:x86

4ba127fe6eacb6b5853313f4b9c03263

Code Sign

69:d0:c8:ba:19:31:3f:73:bb:36:a5:a8:73:ac:d0:09
Certificate

Issuer

CN=797871756289634253896562428764717967153361673529868625515891451715252584769788918372438574322411216259565529928552691682658776517582536117728595793761

Not Before

17-07-2012 06:12

Not After

31-12-2039 23:59

Subject

CN=797871756289634253896562428764717967153361673529868625515891451715252584769788918372438574322411216259565529928552691682658776517582536117728595793761

Extended Key Usages

ExtKeyUsageCodeSigning

82:86:61:90:c5:f9:9a:18:4e:fe:b0:d2:18:22:f9:36:97:34:d4:4d
Signer

Actual PE Digest

82:86:61:90:c5:f9:9a:18:4e:fe:b0:d2:18:22:f9:36:97:34:d4:4d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatW
GetModuleHandleA
GetProcAddress
CreateFileW
GetWindowsDirectoryW
VirtualAllocEx

user32

LoadIconA

advapi32

RegOpenKeyW
RegCloseKey

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ba127fe6eacb6b5853313f4b9c03263

Code Sign

69:d0:c8:ba:19:31:3f:73:bb:36:a5:a8:73:ac:d0:09Certificate

Extended Key Usages

82:86:61:90:c5:f9:9a:18:4e:fe:b0:d2:18:22:f9:36:97:34:d4:4dSigner

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 152KB - Virtual size: 151KB

.data Size: 40KB - Virtual size: 40KB

.data2 Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 220B

69:d0:c8:ba:19:31:3f:73:bb:36:a5:a8:73:ac:d0:09
Certificate

82:86:61:90:c5:f9:9a:18:4e:fe:b0:d2:18:22:f9:36:97:34:d4:4d
Signer

.text
Size: 152KB - Virtual size: 151KB

.data
Size: 40KB - Virtual size: 40KB

.data2
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 220B