f17761a0d7752d13f0e97668ad015d19_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

f17761a0d7752d13f0e97668ad015d19_JaffaCakes118
Size

13.5MB
MD5

f17761a0d7752d13f0e97668ad015d19
SHA1

f34fbe33f36406254fd2780878882aef4c399cdc
SHA256

697cb7e261bc5afa0968304b1401b1d8219ad4f6c734d3fe1bde0aca1e626894
SHA512

6a6c234c06bb28877e6bab9f28f9f5bd1ca3e0414ade3241faf75449bfaf752386f67a28f1ad6303152f0cd82daeb6263789643e745e7fb76e7a7baeef231d14
SSDEEP

393216:BX63g7HqV1hKUF09LiIvqHBrT8No/DcMW7L1AAp:8weV1hKDy3q55p

Score

1^/10

Malware Config

Signatures

Files

f17761a0d7752d13f0e97668ad015d19_JaffaCakes118
.7z
032b09bbf1c63afc06afb011d69bafc096d7d925d99e24e3785db5a2957358ec
.exe windows:4 windows x86 arch:x86

Code Sign

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29-10-2015 11:55

Not After

19-01-2027 11:55

Subject

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6c:e7:a0:c6:2f:27:fa:98:f7:88:53:e1:ad:11:17:3f
Certificate

Issuer

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

26-05-2021 13:22

Not After

26-05-2022 13:22

Subject

SERIALNUMBER=799638700,CN=D&K ENGINEERING,O=D&K ENGINEERING,POSTALCODE=92127,STREET=15890 Bernardo Center Dr,L=SAN DIEGO,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

1e:7f:a8:4e:25:e8:32:8c:d4:23:ee:63:c2:66:5a:e9:94:a6:2f:89:2f:64:38:62:a1:89:4b:b3:d1:f1:85:68
Signer

Actual PE Digest

1e:7f:a8:4e:25:e8:32:8c:d4:23:ee:63:c2:66:5a:e9:94:a6:2f:89:2f:64:38:62:a1:89:4b:b3:d1:f1:85:68

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 106.3MB - Virtual size: 106.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3Certificate

Extended Key Usages

Key Usages

6c:e7:a0:c6:2f:27:fa:98:f7:88:53:e1:ad:11:17:3fCertificate

Extended Key Usages

Key Usages

1e:7f:a8:4e:25:e8:32:8c:d4:23:ee:63:c2:66:5a:e9:94:a6:2f:89:2f:64:38:62:a1:89:4b:b3:d1:f1:85:68Signer

Headers

File Characteristics

Sections

CODE Size: 5.1MB - Virtual size: 5.1MB

DATA Size: 4KB - Virtual size: 4KB

BSS Size: - Virtual size: 2KB

.idata Size: 8KB - Virtual size: 7KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 21KB - Virtual size: 21KB

.rsrc Size: 106.3MB - Virtual size: 106.3MB

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3
Certificate

6c:e7:a0:c6:2f:27:fa:98:f7:88:53:e1:ad:11:17:3f
Certificate

1e:7f:a8:4e:25:e8:32:8c:d4:23:ee:63:c2:66:5a:e9:94:a6:2f:89:2f:64:38:62:a1:89:4b:b3:d1:f1:85:68
Signer

CODE
Size: 5.1MB - Virtual size: 5.1MB

DATA
Size: 4KB - Virtual size: 4KB

BSS
Size: - Virtual size: 2KB

.idata
Size: 8KB - Virtual size: 7KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 21KB - Virtual size: 21KB

.rsrc
Size: 106.3MB - Virtual size: 106.3MB