JaffaCakes118_95bb0d85b8cc7eb74e4fd2aa9ec1a313

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_95bb0d85b8cc7eb74e4fd2aa9ec1a313
Size

149KB
MD5

95bb0d85b8cc7eb74e4fd2aa9ec1a313
SHA1

5ae87e67c6a1ffa0b6adfaedacaf375d12360b6b
SHA256

7cf588d888d3da3bae1d5a9f1d70a4906974325a556bf44e5e41ff5ec2312558
SHA512

7e3b345bccb23390406b938f4bc68a13e7c07debf28414bec6ed004e700df697bcfc63225a9622388167c221d7d0f516f4f5a15bdca962f3291ffbfbe8d8e51d
SSDEEP

3072:QwuaYhZgLRxkstm6fE1TuU8A5Y3lO0GRK2:JdYwR2stF8SUY3lr2

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_95bb0d85b8cc7eb74e4fd2aa9ec1a313
.exe windows:4 windows x86 arch:x86

8018b960ba51584f1f60fc7825388020

Code Sign

54:00:3e:13:99:5a:19:7c:07:f5:e2:f8:d3:da:c6:17:2f:fb:34:e6
Signer

Actual PE Digest

54:00:3e:13:99:5a:19:7c:07:f5:e2:f8:d3:da:c6:17:2f:fb:34:e6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
LoadLibraryA
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW
CloseHandle
VirtualAllocEx

advapi32

RegCloseKey

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data7
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data6
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8018b960ba51584f1f60fc7825388020

Code Sign

54:00:3e:13:99:5a:19:7c:07:f5:e2:f8:d3:da:c6:17:2f:fb:34:e6Signer

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 32KB - Virtual size: 31KB

.data Size: 112KB - Virtual size: 112KB

.data7 Size: 512B - Virtual size: 100B

.data6 Size: 512B - Virtual size: 100B

.data5 Size: 512B - Virtual size: 100B

.data4 Size: 512B - Virtual size: 100B

.data3 Size: 512B - Virtual size: 100B

.data2 Size: 512B - Virtual size: 100B

.reloc Size: 512B - Virtual size: 192B

54:00:3e:13:99:5a:19:7c:07:f5:e2:f8:d3:da:c6:17:2f:fb:34:e6
Signer

.text
Size: 32KB - Virtual size: 31KB

.data
Size: 112KB - Virtual size: 112KB

.data7
Size: 512B - Virtual size: 100B

.data6
Size: 512B - Virtual size: 100B

.data5
Size: 512B - Virtual size: 100B

.data4
Size: 512B - Virtual size: 100B

.data3
Size: 512B - Virtual size: 100B

.data2
Size: 512B - Virtual size: 100B

.reloc
Size: 512B - Virtual size: 192B