f3f95148bf913074ce5dda7151846a79_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f3f95148bf913074ce5dda7151846a79_JaffaCakes118
Size

11KB
MD5

f3f95148bf913074ce5dda7151846a79
SHA1

816ac5267b9cbc10e64d0767af194f833e86713e
SHA256

0565f4db2fcd614df0fffbc577a4a7f4fa9827997b533b12f77c0d252955c785
SHA512

bcac9ae38f62a1a44077bbf07f30b383e10f3eb55ec1db8bb1ea18b30f37893aba23eebb4f713e3ac66417f5865cdce45d231cda232488751937f5b5afb41843
SSDEEP

192:XAKWFRGPGd3ehKBzHCAdGlYqufZnFptC0g2Shyk+MU:iRGPeTBziTGfZHtWh+

Score

1^/10

Malware Config

Signatures

Files

f3f95148bf913074ce5dda7151846a79_JaffaCakes118
.xll windows:1 windows x64 arch:x64

da0a67a790afdeade3fa0b7b5cc02757

Code Sign

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/03/2019, 00:00

Not After

31/12/2028, 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

67:0c:34:94:20:6b:9f:0c:18:71:4f:dc:ff:aa:a4:2f
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

28/05/2021, 00:00

Not After

28/05/2022, 23:59

Subject

CN=ADRIATIK PORT SERVIS\, d.o.o.,O=ADRIATIK PORT SERVIS\, d.o.o.,L=Koper,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:ee:00:e8:da:21:de:90:f6:9c:f8:bd:9c:17:ed:6a:7e:dc:c1:6f
Signer

Actual PE Digest

3d:ee:00:e8:da:21:de:90:f6:9c:f8:bd:9c:17:ed:6a:7e:dc:c1:6f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mswsock

TransmitFile
inet_network
GetServiceA
GetAcceptExSockaddrs
SetServiceA
getnetbyname
GetNameByTypeA
SetServiceW
GetNameByTypeW
GetTypeByNameW
EnumProtocolsA
GetTypeByNameA
sethostname
WSARecvEx
s_perror
GetAddressByNameW
EnumProtocolsW
MigrateWinsockConfiguration
GetServiceW
rresvport
GetAddressByNameA
NPLoadNameSpaces
AcceptEx
rexec
rcmd
dn_expand

Exports

Exports

xlAutoOpen

Sections

.img
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bin
Size: - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ico
Size: - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.res
Size: - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 66B

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da0a67a790afdeade3fa0b7b5cc02757

Code Sign

01Certificate

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

67:0c:34:94:20:6b:9f:0c:18:71:4f:dc:ff:aa:a4:2fCertificate

Extended Key Usages

Key Usages

3d:ee:00:e8:da:21:de:90:f6:9c:f8:bd:9c:17:ed:6a:7e:dc:c1:6fSigner

Headers

DLL Characteristics

File Characteristics

Imports

mswsock

Exports

Exports

Sections

.img Size: 3KB - Virtual size: 3KB

.data Size: - Virtual size: 512B

.bin Size: - Virtual size: 512B

.ico Size: - Virtual size: 512B

.res Size: - Virtual size: 512B

.edata Size: 512B - Virtual size: 66B

.reloc Size: 512B - Virtual size: 8B

01
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

67:0c:34:94:20:6b:9f:0c:18:71:4f:dc:ff:aa:a4:2f
Certificate

3d:ee:00:e8:da:21:de:90:f6:9c:f8:bd:9c:17:ed:6a:7e:dc:c1:6f
Signer

.img
Size: 3KB - Virtual size: 3KB

.data
Size: - Virtual size: 512B

.bin
Size: - Virtual size: 512B

.ico
Size: - Virtual size: 512B

.res
Size: - Virtual size: 512B

.edata
Size: 512B - Virtual size: 66B

.reloc
Size: 512B - Virtual size: 8B