05242a974fc31a3b41486f384d40460c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

05242a974fc31a3b41486f384d40460c_JaffaCakes118
Size

1.4MB
MD5

05242a974fc31a3b41486f384d40460c
SHA1

98db0e521019934a658a3c0e169a4f1e38d9a620
SHA256

a3215a583719dfaa5c2cc8cf374aac16bcc500c24e19f07546a7423888dfd3a9
SHA512

bc28ec63f70c7d083419698bc1e680e09c3129f4fe87d3c3f83af898e8e0238a92813dbd0de5d5ccb8d71e9880419bd48f5f6f3c45048d563c18828739678005
SSDEEP

24576:fju3/JlQ7vWo34HU83nKOoJVvyFqOm6M8BkOfj6cu3VpQTcGfUR2GhZeYqVFme:fa3x6rWooHW4FnMQTWpkcGch96me

Score

1^/10

Malware Config

Signatures

Files

05242a974fc31a3b41486f384d40460c_JaffaCakes118
.zip
XPE_WIN-193874897498794.exe
.exe windows:4 windows x86 arch:x86

Code Sign

2a:9c:21:ac:aa:a6:3a:3c:58:a7:b9:32:2b:ee:94:8d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

16/12/2015, 00:00

Not After

16/12/2018, 23:59

Subject

CN=Google Inc,O=Google Inc,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

67:43:ba:e6:d1:be:57:66:6e:2a:42:eb:0f:af:80:35:c3:6b:a2:96:8e:65:89:65:0a:98:f6:f2:dd:8b:58:f1
Signer

Actual PE Digest

67:43:ba:e6:d1:be:57:66:6e:2a:42:eb:0f:af:80:35:c3:6b:a2:96:8e:65:89:65:0a:98:f6:f2:dd:8b:58:f1

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 735KB - Virtual size: 735KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

2a:9c:21:ac:aa:a6:3a:3c:58:a7:b9:32:2b:ee:94:8dCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6Certificate

Extended Key Usages

Key Usages

67:43:ba:e6:d1:be:57:66:6e:2a:42:eb:0f:af:80:35:c3:6b:a2:96:8e:65:89:65:0a:98:f6:f2:dd:8b:58:f1Signer

Headers

File Characteristics

Sections

CODE Size: 1.6MB - Virtual size: 1.6MB

DATA Size: 30KB - Virtual size: 29KB

BSS Size: - Virtual size: 5KB

.idata Size: 11KB - Virtual size: 10KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 98KB - Virtual size: 97KB

.rsrc Size: 735KB - Virtual size: 735KB

2a:9c:21:ac:aa:a6:3a:3c:58:a7:b9:32:2b:ee:94:8d
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

67:43:ba:e6:d1:be:57:66:6e:2a:42:eb:0f:af:80:35:c3:6b:a2:96:8e:65:89:65:0a:98:f6:f2:dd:8b:58:f1
Signer

CODE
Size: 1.6MB - Virtual size: 1.6MB

DATA
Size: 30KB - Virtual size: 29KB

BSS
Size: - Virtual size: 5KB

.idata
Size: 11KB - Virtual size: 10KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 98KB - Virtual size: 97KB

.rsrc
Size: 735KB - Virtual size: 735KB