fec3c0499355b1b60196658bf4ac6cdd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fec3c0499355b1b60196658bf4ac6cdd_JaffaCakes118
Size

260KB
MD5

fec3c0499355b1b60196658bf4ac6cdd
SHA1

37a4ab6d719c75c703b81f806f7e082d71cee964
SHA256

12d440b905b6a2684bdef6d70cdcd3075b3afbdcf3e272e78bbb599b58b36e9f
SHA512

ff8edb5cfa02dfc1eab76f9103923d4511831d43961e73d8684c2a0643f334fa8b51fb9cf115655d2d3f9d1b57c0e8847905459651cfd281002113f62c6ad46e
SSDEEP

6144:mm/dEEsw5jRCpn20sEjWUW/vMk+KrnrWZI3+uk:xmEHlCpnlj6/vMkHnGI3+d

Score

1^/10

Malware Config

Signatures

Files

fec3c0499355b1b60196658bf4ac6cdd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

3d:23:c7:e4:a3:9e:26:dc
Certificate

Issuer

CN=CreateWorkflowOwnerCommand

Not Before

29/07/2021, 09:00

Not After

30/07/2022, 07:00

Subject

CN=CreateWorkflowOwnerCommand

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

3d:23:c7:e4:a3:9e:26:dc
Certificate

Issuer

CN=CreateWorkflowOwnerCommand

Not Before

29/07/2021, 09:00

Not After

30/07/2022, 07:00

Subject

CN=CreateWorkflowOwnerCommand

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

51:aa:63:9b:53:3e:c7:b7:b0:8d:2b:d7:f2:91:39:2d:eb:01:ba:a3:2f:e6:26:65:9f:60:df:7b:04:98:ca:8c
Signer

Actual PE Digest

51:aa:63:9b:53:3e:c7:b7:b0:8d:2b:d7:f2:91:39:2d:eb:01:ba:a3:2f:e6:26:65:9f:60:df:7b:04:98:ca:8c

Digest Algorithm

sha256

PE Digest Matches

true

e3:b8:43:e2:b1:58:88:ee:22:86:72:f3:0f:40:a8:dc:bb:fc:21:28
Signer

Actual PE Digest

e3:b8:43:e2:b1:58:88:ee:22:86:72:f3:0f:40:a8:dc:bb:fc:21:28

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

3d:23:c7:e4:a3:9e:26:dcCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

3d:23:c7:e4:a3:9e:26:dcCertificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

51:aa:63:9b:53:3e:c7:b7:b0:8d:2b:d7:f2:91:39:2d:eb:01:ba:a3:2f:e6:26:65:9f:60:df:7b:04:98:ca:8cSigner

e3:b8:43:e2:b1:58:88:ee:22:86:72:f3:0f:40:a8:dc:bb:fc:21:28Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 204KB - Virtual size: 203KB

.reloc Size: 512B - Virtual size: 12B

.rsrc Size: 44KB - Virtual size: 43KB

3d:23:c7:e4:a3:9e:26:dc
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

3d:23:c7:e4:a3:9e:26:dc
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

51:aa:63:9b:53:3e:c7:b7:b0:8d:2b:d7:f2:91:39:2d:eb:01:ba:a3:2f:e6:26:65:9f:60:df:7b:04:98:ca:8c
Signer

e3:b8:43:e2:b1:58:88:ee:22:86:72:f3:0f:40:a8:dc:bb:fc:21:28
Signer

.text
Size: 204KB - Virtual size: 203KB

.reloc
Size: 512B - Virtual size: 12B

.rsrc
Size: 44KB - Virtual size: 43KB