General

Malware Config

Signatures

Files

• ae527903440b3c4a70647001ba291d53_JaffaCakes118

  .exe windows:5 windows x86 arch:x86

  96e21d905c86f50f521b10b486865a6f

  
  

  Code Sign

  5c:23:3d:9b:98:07:04:6f:b3:a5:a5:63:27:0c:0c:c0

  Certificate

  Issuer

  CN=XKWYBHBKAVNCSJAVXA

  Not Before

  29-09-2020 17:51

  Not After

  31-12-2039 23:59

  Subject

  CN=XKWYBHBKAVNCSJAVXA

  Extended Key Usages

  ExtKeyUsageCodeSigning

  a7:24:37:01:58:a3:0b:92:0b:60:12:f0:f8:ed:84:53:81:4d:fc:1c

  Signer

  Actual PE Digest

  a7:24:37:01:58:a3:0b:92:0b:60:12:f0:f8:ed:84:53:81:4d:fc:1c

  Digest Algorithm

  sha1

  PE Digest Matches

  false

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetLastError

  LoadLibraryExW

  GetModuleHandleW

  VirtualAlloc

  Sleep

  OutputDebugStringW

  LoadLibraryW

  GetWindowsDirectoryA

  GetWindowsDirectoryW

  GetVersionExW

  GetVersion

  GetSystemDirectoryA

  GetSystemDirectoryW

  GetProcAddress

  GetLogicalDrives

  GetDriveTypeW

  GetCurrentProcessId

  GetCurrentProcess

  FreeLibrary

  FindFirstFileW

  FindClose

  CloseHandle

  user32

  GetKeyboardLayout

  CloseWindow

  GetForegroundWindow

  CopyIcon

  ShowCaret

  IsCharAlphaNumericW

  LoadCursorA

  gdi32

  CreateCompatibleDC

  CreateHalftonePalette

  GetEnhMetaFileW

  GetEnhMetaFileBits

  advapi32

  RegOpenKeyW

  RegQueryValueExW

  Sections

  .text

  Size: 4.0MB - Virtual size: 4.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text62

  Size: 512B - Virtual size: 130B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text61

  Size: 512B - Virtual size: 130B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text6

  Size: 512B - Virtual size: 130B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text5

  Size: 512B - Virtual size: 130B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ