JaffaCakes118_5a24a655bfd91f8e40eb78858be86181

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_5a24a655bfd91f8e40eb78858be86181
Size

118KB
MD5

5a24a655bfd91f8e40eb78858be86181
SHA1

e7ee639a7c223912696e070feea90ea3544e6297
SHA256

0638616fa81fdd29480bc381e67a064544b8e083b737d6513808925d60f5e162
SHA512

f62e20cd590cb1845165a35b6b2fd2e60f3b88bb89d330a7a03a87a6a004b98db7e1c10e2f1f7baf5ea7c4d5a10b25b591096896b33c24ee1b89cf4521e43e31
SSDEEP

1536:Ian2+jA1tMk2vuUHAOE3FYPNP1mQmaLWLovOs+zhOptBmpnuxj2JbERv1euGXeq:BnU1tMtvsJ3aPNX+oTmpuIyHeuSeq

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_5a24a655bfd91f8e40eb78858be86181
.exe windows:4 windows x86 arch:x86

641f55d89cd96b75c8269e4a5e7be8ae

Code Sign

57:a1:37:6d:14:73:eb:b7:47:f4:24:66:fe:32:28:82
Certificate

Issuer

CN=RLrE

Not Before

23-05-2012 16:13

Not After

31-12-2039 23:59

Subject

CN=RLrE

Extended Key Usages

ExtKeyUsageCodeSigning

17:65:eb:5a:ee:95:e2:ac:28:08:29:23:3c:4f:31:69:88:96:d3:35
Signer

Actual PE Digest

17:65:eb:5a:ee:95:e2:ac:28:08:29:23:3c:4f:31:69:88:96:d3:35

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
lstrcatW
CreateFileW
CloseHandle
VirtualAllocEx
WriteFile
GetModuleHandleW
GetProcAddress

advapi32

RegCloseKey

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

641f55d89cd96b75c8269e4a5e7be8ae

Code Sign

57:a1:37:6d:14:73:eb:b7:47:f4:24:66:fe:32:28:82Certificate

Extended Key Usages

17:65:eb:5a:ee:95:e2:ac:28:08:29:23:3c:4f:31:69:88:96:d3:35Signer

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 14KB - Virtual size: 13KB

.data Size: 96KB - Virtual size: 96KB

.data4 Size: 1024B - Virtual size: 1000B

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 1024B - Virtual size: 1000B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 172B

57:a1:37:6d:14:73:eb:b7:47:f4:24:66:fe:32:28:82
Certificate

17:65:eb:5a:ee:95:e2:ac:28:08:29:23:3c:4f:31:69:88:96:d3:35
Signer

.text
Size: 14KB - Virtual size: 13KB

.data
Size: 96KB - Virtual size: 96KB

.data4
Size: 1024B - Virtual size: 1000B

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 172B