dc4c7e776d710e977c236ace193cc365_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

dc4c7e776d710e977c236ace193cc365_JaffaCakes118
Size

3.1MB
MD5

dc4c7e776d710e977c236ace193cc365
SHA1

fcfab7c8697d2cedcd9d06737554e0f9a9c99925
SHA256

92e4ebad6861d364d170d96491106079624a6ec9a5934faebfd975dfc9654265
SHA512

8544cbf37dbb91094bd0f4c60e9446d6aaf379a09663eb6f826c0df7923312abed356b6a3cf6254133b6aa140d1045a413b5807ab267c1fd0338234c9e57f3b0
SSDEEP

49152:ydLtEFApj2vxy/ezctwRPpgHngZc4JDZD6lE4D210wRmqiNoCxJ3OOYrCQY+F+cs:YBiewRhgHnol6UXRmvNGDewF+cmyW

Score

1^/10

Malware Config

Signatures

Files

dc4c7e776d710e977c236ace193cc365_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Code Sign

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/03/2019, 00:00

Not After

31/12/2028, 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

60:cb:53:18:6c:9e:05:7c:aa:fe:91:c4:9d:26:98:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

22/02/2021, 00:00

Not After

22/02/2022, 23:59

Subject

CN=Joktan da Silva Neves Junior,O=Joktan da Silva Neves Junior,POSTALCODE=06754-020,STREET=Rua José Soares de Azevedo\, 188,L=Taboão da Serra,ST=São Paulo,C=BR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/03/2019, 00:00

Not After

31/12/2028, 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

60:cb:53:18:6c:9e:05:7c:aa:fe:91:c4:9d:26:98:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

22/02/2021, 00:00

Not After

22/02/2022, 23:59

Subject

CN=Joktan da Silva Neves Junior,O=Joktan da Silva Neves Junior,POSTALCODE=06754-020,STREET=Rua José Soares de Azevedo\, 188,L=Taboão da Serra,ST=São Paulo,C=BR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8a:23:0e:a4:61:7b:d7:b8:31:6a:eb:97:18:78:5c:d6:5b:23:48:1b:f6:37:36:67:c8:6f:69:92:20:d4:e5:0a
Signer

Actual PE Digest

8a:23:0e:a4:61:7b:d7:b8:31:6a:eb:97:18:78:5c:d6:5b:23:48:1b:f6:37:36:67:c8:6f:69:92:20:d4:e5:0a

Digest Algorithm

sha256

PE Digest Matches

true

f3:45:8c:65:10:ba:12:1f:8f:71:7f:20:71:79:fe:70:1b:55:3f:49
Signer

Actual PE Digest

f3:45:8c:65:10:ba:12:1f:8f:71:7f:20:71:79:fe:70:1b:55:3f:49

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

LTGetILTMemory
SetMasterDatabase

Sections

.text
Size: 546KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.loadcon
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

60:cb:53:18:6c:9e:05:7c:aa:fe:91:c4:9d:26:98:82Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

60:cb:53:18:6c:9e:05:7c:aa:fe:91:c4:9d:26:98:82Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

8a:23:0e:a4:61:7b:d7:b8:31:6a:eb:97:18:78:5c:d6:5b:23:48:1b:f6:37:36:67:c8:6f:69:92:20:d4:e5:0aSigner

f3:45:8c:65:10:ba:12:1f:8f:71:7f:20:71:79:fe:70:1b:55:3f:49Signer

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 546KB - Virtual size: 1.6MB

.data Size: 36KB - Virtual size: 173KB

.data Size: 11KB - Virtual size: 181KB

.data Size: 5KB - Virtual size: 21KB

.data Size: 42KB - Virtual size: 93KB

.edata Size: 512B - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

.rsrc Size: 15KB - Virtual size: 15KB

.text Size: - Virtual size: 4.9MB

.loadcon Size: 4KB - Virtual size: 4KB

.text Size: 2.4MB - Virtual size: 2.4MB

.init Size: 512B - Virtual size: 512B

.data Size: 21KB - Virtual size: 21KB

.data Size: 42KB - Virtual size: 42KB

.reloc Size: 2KB - Virtual size: 4KB

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

60:cb:53:18:6c:9e:05:7c:aa:fe:91:c4:9d:26:98:82
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

60:cb:53:18:6c:9e:05:7c:aa:fe:91:c4:9d:26:98:82
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8a:23:0e:a4:61:7b:d7:b8:31:6a:eb:97:18:78:5c:d6:5b:23:48:1b:f6:37:36:67:c8:6f:69:92:20:d4:e5:0a
Signer

f3:45:8c:65:10:ba:12:1f:8f:71:7f:20:71:79:fe:70:1b:55:3f:49
Signer

.text
Size: 546KB - Virtual size: 1.6MB

.data
Size: 36KB - Virtual size: 173KB

.data
Size: 11KB - Virtual size: 181KB

.data
Size: 5KB - Virtual size: 21KB

.data
Size: 42KB - Virtual size: 93KB

.edata
Size: 512B - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.rsrc
Size: 15KB - Virtual size: 15KB

.text
Size: - Virtual size: 4.9MB

.loadcon
Size: 4KB - Virtual size: 4KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.init
Size: 512B - Virtual size: 512B

.data
Size: 21KB - Virtual size: 21KB

.data
Size: 42KB - Virtual size: 42KB

.reloc
Size: 2KB - Virtual size: 4KB