ec238b5208ee915f5b8aac9097b098d9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ec238b5208ee915f5b8aac9097b098d9_JaffaCakes118
Size

588KB
MD5

ec238b5208ee915f5b8aac9097b098d9
SHA1

b55f365364f9e6d8431c23bec831181e511d0af4
SHA256

c1b0427390fb4ba16fd9a6ba3c13fa688ea74c7630d811656db1ab9ce4b1f4e1
SHA512

f4777661298f6b7633e4e2ddf7f7625905422c49358cb467cfb7ca12343f8ab3cf86dde9a0408534c6c99d1078222d2cf87c46a02b02967d1968dbe7438c854b
SSDEEP

12288:Yn9SprsC6z2SKSKcGdHWnud2TgU4iCnI/adUNF3Z4mxx6dmD66zOZAoTJdo:WAprT6iSQHETgU+nI/UyQmXhD6KeAoT0

Score

1^/10

Malware Config

Signatures

Files

ec238b5208ee915f5b8aac9097b098d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Code Sign

24:e1:bd:38:4a:95:29:f8
Certificate

Issuer

CN=CA365 Free Root Certificate,O=CA365,L=Beijing,ST=Beijing,C=CN

Not Before

12/05/2001, 08:40

Not After

05/05/2031, 08:40

Subject

CN=CA365 Free Root Certificate,O=CA365,L=Beijing,ST=Beijing,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:4f:2c:dc:44:48:6b:5d
Certificate

Issuer

CN=CA365 Free Root Certificate,O=CA365,L=Beijing,ST=Beijing,C=CN

Not Before

17/03/2009, 12:28

Not After

17/03/2010, 12:28

Subject

CN=Intel(R) Common User Interface,OU=Intel(R) Common User Interface,O=Intel Corporation,L=BeiJing,ST=BeiJing,C=CN

Extended Key Usages

ExtKeyUsageClientAuth

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageKeyEncipherment
KeyUsageDataEncipherment

fe:51:dd:c4:0c:a8:34:cd:f0:69:b9:d8:70:d6:12:fb:15:83:5d:b7
Signer

Actual PE Digest

fe:51:dd:c4:0c:a8:34:cd:f0:69:b9:d8:70:d6:12:fb:15:83:5d:b7

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.aszzzza
Size: 24KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dsfxccc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfvgfff
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vfcccbb
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dertyyy
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fvghjkk
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vfcdfff
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 234KB - Virtual size: 584KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cvhgvvv
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cheny
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

24:e1:bd:38:4a:95:29:f8Certificate

Key Usages

1b:4f:2c:dc:44:48:6b:5dCertificate

Extended Key Usages

Key Usages

fe:51:dd:c4:0c:a8:34:cd:f0:69:b9:d8:70:d6:12:fb:15:83:5d:b7Signer

Headers

File Characteristics

Sections

.aszzzza Size: 24KB - Virtual size: 48KB

.dsfxccc Size: 1KB - Virtual size: 4KB

.gfvgfff Size: - Virtual size: 4KB

.vfcccbb Size: 1KB - Virtual size: 4KB

.dertyyy Size: - Virtual size: 4KB

.fvghjkk Size: 512B - Virtual size: 4KB

.vfcdfff Size: - Virtual size: 4KB

.rsrc Size: 234KB - Virtual size: 584KB

.cvhgvvv Size: 2KB - Virtual size: 4KB

.cheny Size: 320KB - Virtual size: 320KB

.adata Size: - Virtual size: 4KB

24:e1:bd:38:4a:95:29:f8
Certificate

1b:4f:2c:dc:44:48:6b:5d
Certificate

fe:51:dd:c4:0c:a8:34:cd:f0:69:b9:d8:70:d6:12:fb:15:83:5d:b7
Signer

.aszzzza
Size: 24KB - Virtual size: 48KB

.dsfxccc
Size: 1KB - Virtual size: 4KB

.gfvgfff
Size: - Virtual size: 4KB

.vfcccbb
Size: 1KB - Virtual size: 4KB

.dertyyy
Size: - Virtual size: 4KB

.fvghjkk
Size: 512B - Virtual size: 4KB

.vfcdfff
Size: - Virtual size: 4KB

.rsrc
Size: 234KB - Virtual size: 584KB

.cvhgvvv
Size: 2KB - Virtual size: 4KB

.cheny
Size: 320KB - Virtual size: 320KB

.adata
Size: - Virtual size: 4KB