f6f1b99f4aa6bbff5c81957efa752e23_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f6f1b99f4aa6bbff5c81957efa752e23_JaffaCakes118
Size

31KB
MD5

f6f1b99f4aa6bbff5c81957efa752e23
SHA1

001336ef62cd1aeb4ddb37a6e2c4f9c14deb3296
SHA256

145b4b84c2e857f12e3a8b5e32f664ef59db1e962f881386b224f2de7ea8c0b2
SHA512

7ff99b7294f7e4021f4c2f2d4185f6552d32b4a61df614053c1258ffbc002b588dc2e0008f79d12431af3d75df485b580d1a8f8ae741dc8e7d0ac40006abce51
SSDEEP

768:EdL5HFxTS9acVNVdlG959NepeFnXi4BrSF:yHX+fdlRcFn3rSF

Score

1^/10

Malware Config

Signatures

Files

f6f1b99f4aa6bbff5c81957efa752e23_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

9e:fc:01:d8:1f:79:2e:8b:74:e2:aa:24:5d:97:a6:6b
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

28/08/2014, 00:00

Not After

28/08/2015, 23:59

Subject

CN=Laroste Apps,O=Laroste Apps,POSTALCODE=2025,STREET=Dasoupoli Strovolos+STREET=Athinodorou 3,L=Nicosia,ST=Cyprus,C=CY

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

86:7d:1b:58:d4:fa:75:3d:42:27:46:32:27:0a:11:64:36:25:a8:8e
Signer

Actual PE Digest

86:7d:1b:58:d4:fa:75:3d:42:27:46:32:27:0a:11:64:36:25:a8:8e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\erez\crossrider\repos\cr-ie-plugin\CS_test_websocket_client\CS_test_websocket_client\obj\Release\TorpedoCh.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

9e:fc:01:d8:1f:79:2e:8b:74:e2:aa:24:5d:97:a6:6bCertificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bbCertificate

Extended Key Usages

Key Usages

86:7d:1b:58:d4:fa:75:3d:42:27:46:32:27:0a:11:64:36:25:a8:8eSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 24KB - Virtual size: 24KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

9e:fc:01:d8:1f:79:2e:8b:74:e2:aa:24:5d:97:a6:6b
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

86:7d:1b:58:d4:fa:75:3d:42:27:46:32:27:0a:11:64:36:25:a8:8e
Signer

.text
Size: 24KB - Virtual size: 24KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B