ffa1b5b8128970e1784f9296f74acae4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ffa1b5b8128970e1784f9296f74acae4_JaffaCakes118
Size

1.3MB
MD5

ffa1b5b8128970e1784f9296f74acae4
SHA1

18bdcc9e7d720d80e5435c3a5d325b1639315a1f
SHA256

a998126795924bcb4de4b0748d051c0d18ff0cb2198da5d3445086967837f2c5
SHA512

da4b1519a1ecc0ed31979c1d024ded46fd292b96e50a5c51e349f1e9cc527ab2880812cdebde3328ab1df203ecd448b89dc52d94d40887b73197f6c1d9ab0912
SSDEEP

24576:Ap46VpIqE0SQV6GhpyK0BErrWD2+/EYOQANQM7HhZyoOx9F1UWWQn:V6Ve8dzpYHioEFQSQM7HhgFd+g

Score

1^/10

Malware Config

Signatures

Files

ffa1b5b8128970e1784f9296f74acae4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:7f:11:8c:54:2b:7d:64:04:28:c1:ec:87:a3:37:99
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24/09/2020, 00:00

Not After

27/09/2023, 12:00

Subject

SERIALNUMBER=1027739867473,CN=Kaspersky Lab JSC,O=Kaspersky Lab JSC,L=Moscow,C=RU,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025255

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:7f:11:8c:54:2b:7d:64:04:28:c1:ec:87:a3:37:99
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24/09/2020, 00:00

Not After

27/09/2023, 12:00

Subject

SERIALNUMBER=1027739867473,CN=Kaspersky Lab JSC,O=Kaspersky Lab JSC,L=Moscow,C=RU,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025255

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

56:6e:22:7a:e0:77:e4:3c:a7:e4:fb:2a:00:84:e7:4e:7a:52:6a:a8:04:bb:71:2b:80:d9:76:e1:3d:a0:8d:0c
Signer

Actual PE Digest

56:6e:22:7a:e0:77:e4:3c:a7:e4:fb:2a:00:84:e7:4e:7a:52:6a:a8:04:bb:71:2b:80:d9:76:e1:3d:a0:8d:0c

Digest Algorithm

sha256

PE Digest Matches

false

1f:e5:0e:c4:c0:77:af:ca:38:c1:0b:21:52:74:94:ba:ef:cb:2c:cc
Signer

Actual PE Digest

1f:e5:0e:c4:c0:77:af:ca:38:c1:0b:21:52:74:94:ba:ef:cb:2c:cc

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

System64.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77Certificate

Key Usages

0e:7f:11:8c:54:2b:7d:64:04:28:c1:ec:87:a3:37:99Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77Certificate

Key Usages

0e:7f:11:8c:54:2b:7d:64:04:28:c1:ec:87:a3:37:99Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

56:6e:22:7a:e0:77:e4:3c:a7:e4:fb:2a:00:84:e7:4e:7a:52:6a:a8:04:bb:71:2b:80:d9:76:e1:3d:a0:8d:0cSigner

1f:e5:0e:c4:c0:77:af:ca:38:c1:0b:21:52:74:94:ba:ef:cb:2c:ccSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 1024B - Virtual size: 884B

.reloc Size: 512B - Virtual size: 12B

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

0e:7f:11:8c:54:2b:7d:64:04:28:c1:ec:87:a3:37:99
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

0e:7f:11:8c:54:2b:7d:64:04:28:c1:ec:87:a3:37:99
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

56:6e:22:7a:e0:77:e4:3c:a7:e4:fb:2a:00:84:e7:4e:7a:52:6a:a8:04:bb:71:2b:80:d9:76:e1:3d:a0:8d:0c
Signer

1f:e5:0e:c4:c0:77:af:ca:38:c1:0b:21:52:74:94:ba:ef:cb:2c:cc
Signer

.text
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 1024B - Virtual size: 884B

.reloc
Size: 512B - Virtual size: 12B