039e49ca813de9151ef1f8fa5f2fdf8c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

039e49ca813de9151ef1f8fa5f2fdf8c_JaffaCakes118
Size

1.8MB
MD5

039e49ca813de9151ef1f8fa5f2fdf8c
SHA1

bb99c5fdaf3414b6d05874dc521d0a7cbc5c21ac
SHA256

33b96aa3d9bfe830893eb9d1272a914b1b446e2d280d0e324af6345ef003da99
SHA512

6f432698d958525a7d9e54b4553ba2cbbe36228dfbfc4e228bda3d308eb03379fe76e3b418c8afd19c6c327892199c95c9ed9b403c5f05e324152ac8dff1e656
SSDEEP

24576:lh2mtSvdt2h7tDo4IFOtKhuqhju3hUjZtUagcR:lwlr2ptD5uuqY3hE

Score

1^/10

Malware Config

Signatures

Files

039e49ca813de9151ef1f8fa5f2fdf8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

84:98:06:a6:62:dd:5b:c2:51:e4:9f:1d:71:7e:71:bc
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/08/2017, 00:00

Not After

22/08/2020, 23:59

Subject

SERIALNUMBER=10873661,CN=New Vector Ltd,O=New Vector Ltd,POSTALCODE=WC1R 4AG,STREET=26 Red Lion Square,L=London,ST=London,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

27/04/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

30/05/2020, 10:48

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

84:98:06:a6:62:dd:5b:c2:51:e4:9f:1d:71:7e:71:bc
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/08/2017, 00:00

Not After

22/08/2020, 23:59

Subject

SERIALNUMBER=10873661,CN=New Vector Ltd,O=New Vector Ltd,POSTALCODE=WC1R 4AG,STREET=26 Red Lion Square,L=London,ST=London,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

27/04/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

30/05/2020, 10:48

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

a0:9c:9a:da:3f:26:90:b0:e1:d6:07:55:88:45:49:a4:07:f8:d9:e5:98:ce:cd:de:51:13:1e:2f:ca:8a:4b:4a
Signer

Actual PE Digest

a0:9c:9a:da:3f:26:90:b0:e1:d6:07:55:88:45:49:a4:07:f8:d9:e5:98:ce:cd:de:51:13:1e:2f:ca:8a:4b:4a

Digest Algorithm

sha256

PE Digest Matches

true

6d:c6:18:64:d5:ef:9f:4c:af:af:24:44:b6:fb:91:20:dc:66:c4:35
Signer

Actual PE Digest

6d:c6:18:64:d5:ef:9f:4c:af:af:24:44:b6:fb:91:20:dc:66:c4:35

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

84:98:06:a6:62:dd:5b:c2:51:e4:9f:1d:71:7e:71:bcCertificate

Extended Key Usages

Key Usages

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19Certificate

Extended Key Usages

Key Usages

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49Certificate

Extended Key Usages

Key Usages

84:98:06:a6:62:dd:5b:c2:51:e4:9f:1d:71:7e:71:bcCertificate

Extended Key Usages

Key Usages

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19Certificate

Extended Key Usages

Key Usages

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49Certificate

Extended Key Usages

Key Usages

a0:9c:9a:da:3f:26:90:b0:e1:d6:07:55:88:45:49:a4:07:f8:d9:e5:98:ce:cd:de:51:13:1e:2f:ca:8a:4b:4aSigner

6d:c6:18:64:d5:ef:9f:4c:af:af:24:44:b6:fb:91:20:dc:66:c4:35Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 12B

84:98:06:a6:62:dd:5b:c2:51:e4:9f:1d:71:7e:71:bc
Certificate

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

84:98:06:a6:62:dd:5b:c2:51:e4:9f:1d:71:7e:71:bc
Certificate

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

a0:9c:9a:da:3f:26:90:b0:e1:d6:07:55:88:45:49:a4:07:f8:d9:e5:98:ce:cd:de:51:13:1e:2f:ca:8a:4b:4a
Signer

6d:c6:18:64:d5:ef:9f:4c:af:af:24:44:b6:fb:91:20:dc:66:c4:35
Signer

.text
Size: 1.7MB - Virtual size: 1.7MB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 12B