JaffaCakes118_544c7f0a3f70352b97cc49c058c16c88

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_544c7f0a3f70352b97cc49c058c16c88
Size

157KB
MD5

544c7f0a3f70352b97cc49c058c16c88
SHA1

b03cca3108bdc93f69af3338ba65f73c4907a524
SHA256

42643b13020bedcacec2d8bc4b17da2b983074f80091261c85e44cc0a85cade8
SHA512

5fe8f1c3c7e99df8833aac0575413697459653b1c15b43b1f36fd13b06928f441611150a72de3bdcd3c4bd615435a103427d75b89a0c59fde686169d7c3474c1
SSDEEP

1536:jiWTgjU+TjiqCOJleieUEZ1h31DdzMJAJ3jRoG77t42yhnLvGOrYAiJ32WHe+CR:lTgXiqCnHZr1VmAJNLvt42oYFJGn

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_544c7f0a3f70352b97cc49c058c16c88
.exe windows:4 windows x86 arch:x86

8ee4e4db0a7b142833e41731d443b972

Code Sign

4b:33:35:92:ff:19:82:ae:4b:92:44:fc:fe:5a:d5:36
Certificate

Issuer

CN=172116263131574115685521881753316816592679835152253617472942511831893668542965164854587548978639638392187361987679228652746878528596411649712191935383

Not Before

18-07-2012 06:33

Not After

31-12-2039 23:59

Subject

CN=172116263131574115685521881753316816592679835152253617472942511831893668542965164854587548978639638392187361987679228652746878528596411649712191935383

Extended Key Usages

ExtKeyUsageCodeSigning

32:48:1c:1f:24:53:52:7b:5c:82:ba:05:e0:db:b7:f0:fe:16:f3:74
Signer

Actual PE Digest

32:48:1c:1f:24:53:52:7b:5c:82:ba:05:e0:db:b7:f0:fe:16:f3:74

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatW
GetModuleHandleA
GetProcAddress
CloseHandle
CreateFileW
GetWindowsDirectoryW
VirtualAllocEx

user32

LoadIconA

advapi32

RegOpenKeyW
RegCloseKey

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8ee4e4db0a7b142833e41731d443b972

Code Sign

4b:33:35:92:ff:19:82:ae:4b:92:44:fc:fe:5a:d5:36Certificate

Extended Key Usages

32:48:1c:1f:24:53:52:7b:5c:82:ba:05:e0:db:b7:f0:fe:16:f3:74Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 112KB - Virtual size: 111KB

.data Size: 40KB - Virtual size: 40KB

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 220B

4b:33:35:92:ff:19:82:ae:4b:92:44:fc:fe:5a:d5:36
Certificate

32:48:1c:1f:24:53:52:7b:5c:82:ba:05:e0:db:b7:f0:fe:16:f3:74
Signer

.text
Size: 112KB - Virtual size: 111KB

.data
Size: 40KB - Virtual size: 40KB

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 220B