e792f597c5482ff275a27371675fb62d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

e792f597c5482ff275a27371675fb62d_JaffaCakes118
Size

342KB
MD5

e792f597c5482ff275a27371675fb62d
SHA1

4c0db890b5f1a94beec693d8f9182694e93f5ed2
SHA256

4438f649be19b342ee623a45a082d81f0a4f7d565630410cd54ba664f7242a80
SHA512

ca021ebcc85f50902fe82f42a3e83fe901921900fd25de618ffb375164096e99fa7eda495efee562eba9ae6166e090fc5a90e95ce563424b356e3f99a6d057cf
SSDEEP

6144:FtHwohiFwLgiCAOPxZhRAYaGcL2rV+T2NoW1rOqqrbJWXN+QuBvZLIOK:FRXiqsA6xZUYsipiW1rOqqrwXN+ztIOK

Score

1^/10

Malware Config

Signatures

Files

e792f597c5482ff275a27371675fb62d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/12/2014, 00:00

Not After

02/12/2029, 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ae:b1:a0:36:af:49:32:c7:77:48:69:9b:f3:d5:56:b2
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

29/10/2020, 00:00

Not After

29/10/2021, 23:59

Subject

SERIALNUMBER=263286-5,CN=Ridev Yazilim Sistemleri Limited Şirketi,O=Ridev Yazilim Sistemleri Limited Şirketi,POSTALCODE=34430,STREET=Beyoğlu +STREET=Evliya Çelebi Mah. Sadi Konuralp Cad. Iksv Vakfi Apt. No:5/2,L=İstanbul,C=TR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025452

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

00:02:20:9c:73:bb:c6:88:9c:3a:ee:9c:f3:c2:89:a8:fd:a4:30:11:cf:e1:67:9c:f2:6a:33:ab:4d:c0:d3:ed
Signer

Actual PE Digest

00:02:20:9c:73:bb:c6:88:9c:3a:ee:9c:f3:c2:89:a8:fd:a4:30:11:cf:e1:67:9c:f2:6a:33:ab:4d:c0:d3:ed

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 313KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1Certificate

Extended Key Usages

Key Usages

ae:b1:a0:36:af:49:32:c7:77:48:69:9b:f3:d5:56:b2Certificate

Extended Key Usages

Key Usages

00:02:20:9c:73:bb:c6:88:9c:3a:ee:9c:f3:c2:89:a8:fd:a4:30:11:cf:e1:67:9c:f2:6a:33:ab:4d:c0:d3:edSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 313KB - Virtual size: 312KB

.rsrc Size: 25KB - Virtual size: 24KB

.reloc Size: 512B - Virtual size: 12B

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

ae:b1:a0:36:af:49:32:c7:77:48:69:9b:f3:d5:56:b2
Certificate

00:02:20:9c:73:bb:c6:88:9c:3a:ee:9c:f3:c2:89:a8:fd:a4:30:11:cf:e1:67:9c:f2:6a:33:ab:4d:c0:d3:ed
Signer

.text
Size: 313KB - Virtual size: 312KB

.rsrc
Size: 25KB - Virtual size: 24KB

.reloc
Size: 512B - Virtual size: 12B