19c0a639deff667326447505fc2a2b50_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

19c0a639deff667326447505fc2a2b50_JaffaCakes118
Size

22KB
MD5

19c0a639deff667326447505fc2a2b50
SHA1

792bcfd8df7dae8775c5d9d695b4679880465baa
SHA256

752d66990097c8be7760d8d6011b1e91daa1d5518951d86f9fdf3d126d54872a
SHA512

513557572cc1ae3904d7bda0279a2fd8dd80bcb3518792d14933893efbdda7c0bf3a500f5686ce65a33fbff9861bbccb7b72d28987b9541b967278e92f44cdf2
SSDEEP

384:RrItjjFUMK6IaO8UPEYQHPnlkJvTQtXv2TcJZFWeAc8c8HPCzcm62vFGHUdCLw:RrItjjL3iQvlkJvrTcXYeAc8c8HPCzco

Score

1^/10

Malware Config

Signatures

Files

19c0a639deff667326447505fc2a2b50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

31:11:00:fb:8d:ee:5e:09:37:6b:69:a8:f6:23:e0:ee
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

14/05/2018, 00:00

Not After

17/06/2021, 23:59

Subject

CN=Global Software\, LLC,O=Global Software\, LLC,L=Raleigh,ST=North Carolina,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

36:92:41:ac:b1:cc:61:be:72:34:ba:52:66:b2:01:8d:40:3a:4d:07
Signer

Actual PE Digest

36:92:41:ac:b1:cc:61:be:72:34:ba:52:66:b2:01:8d:40:3a:4d:07

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

31:11:00:fb:8d:ee:5e:09:37:6b:69:a8:f6:23:e0:eeCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

36:92:41:ac:b1:cc:61:be:72:34:ba:52:66:b2:01:8d:40:3a:4d:07Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 17KB - Virtual size: 16KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

31:11:00:fb:8d:ee:5e:09:37:6b:69:a8:f6:23:e0:ee
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

36:92:41:ac:b1:cc:61:be:72:34:ba:52:66:b2:01:8d:40:3a:4d:07
Signer

.text
Size: 17KB - Virtual size: 16KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B