003827361e5a2d283b3529cc864ea674_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

003827361e5a2d283b3529cc864ea674_JaffaCakes118
Size

17KB
MD5

003827361e5a2d283b3529cc864ea674
SHA1

3958cf8bdd4ffdb2c0b1e732be5a50f7f0937e43
SHA256

209920853f57f256bffb417dbc95e926e10c58da9c12f3fdf83da0bda82c50ab
SHA512

b388b013a336a5b4caea39c5355a11b3bb97186e9950d2b83891e52d5cbf3181906347f725851fcbdc9ae499adada9556db125830b2219b0e329fc5264740ead
SSDEEP

384:3fYXyl+yxH7P3C0tVEoNedNek+vDsgiRiAk4:vUyld5P3C0tVESiRi94

Score

1^/10

Malware Config

Signatures

Files

003827361e5a2d283b3529cc864ea674_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

59:ee:30:85:07:b6:54:ef:22:4e:71:ad:6f:30:e8:e5
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/06/2015, 00:00

Not After

31/05/2016, 23:59

Subject

CN=INTERNETOR,OU=IT,O=INTERNETOR,POSTALCODE=620088,STREET=Yekaterinburg Kirovgrad 49 A,ST=Sverdlovsk,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f4:6c:03:c4:23:cd:e7:48:03:27:da:de:93:16:cc:05:7d:dc:6d:c8
Signer

Actual PE Digest

f4:6c:03:c4:23:cd:e7:48:03:27:da:de:93:16:cc:05:7d:dc:6d:c8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

59:ee:30:85:07:b6:54:ef:22:4e:71:ad:6f:30:e8:e5Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

f4:6c:03:c4:23:cd:e7:48:03:27:da:de:93:16:cc:05:7d:dc:6d:c8Signer

Headers

File Characteristics

Imports

mscoree

Sections

.text Size: 6KB - Virtual size: 5KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 512B - Virtual size: 12B

59:ee:30:85:07:b6:54:ef:22:4e:71:ad:6f:30:e8:e5
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

f4:6c:03:c4:23:cd:e7:48:03:27:da:de:93:16:cc:05:7d:dc:6d:c8
Signer

.text
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 512B - Virtual size: 12B