0914657239a3497433c1777e60d761e1_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

0914657239a3497433c1777e60d761e1_JaffaCakes118
Size

390KB
MD5

0914657239a3497433c1777e60d761e1
SHA1

c7d6bca47753362f40e18d44935c75ecd990df2a
SHA256

3b1ae6021b84138920670f125a1f76cf2625fc1ea104e7228a59cce91d899b83
SHA512

e4bf46e5939f399143b41aa4d880bcddb5f0559703691ba968a87d4893d450b689dc8ba002279d238dfbbccbb6844cb982aa21ac60e37e454c0eb48740334efd
SSDEEP

12288:cdq4BnAn7gOsqs3sVYXjRpv2ZPbNpINABZ9JKrT0NJmB:q6vszcKFoVD0ezJQ

Score

1^/10

Malware Config

Signatures

Files

0914657239a3497433c1777e60d761e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

39:4f:2c:22:62:cc:2d:b9:2b:fe:ae:20:59:3b:f1:74
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

29-03-2018 00:00

Not After

29-03-2020 23:59

Subject

CN=Amazon Services LLC,OU=Software Services,O=Amazon Services LLC,L=Seattle,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

39:4f:2c:22:62:cc:2d:b9:2b:fe:ae:20:59:3b:f1:74
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

29-03-2018 00:00

Not After

29-03-2020 23:59

Subject

CN=Amazon Services LLC,OU=Software Services,O=Amazon Services LLC,L=Seattle,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6b:3c:ed:16:4c:8b:7e:8d:07:17:53:14:71:67:7c:79:ce:e4:53:e6:3d:f0:86:f1:64:d7:c0:99:4b:19:10:8d
Signer

Actual PE Digest

6b:3c:ed:16:4c:8b:7e:8d:07:17:53:14:71:67:7c:79:ce:e4:53:e6:3d:f0:86:f1:64:d7:c0:99:4b:19:10:8d

Digest Algorithm

sha256

PE Digest Matches

false

2e:89:4b:61:06:e1:77:ba:c7:dd:26:c8:99:0d:ce:f3:8b:7a:e7:bf
Signer

Actual PE Digest

2e:89:4b:61:06:e1:77:ba:c7:dd:26:c8:99:0d:ce:f3:8b:7a:e7:bf

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 376KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

39:4f:2c:22:62:cc:2d:b9:2b:fe:ae:20:59:3b:f1:74Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

39:4f:2c:22:62:cc:2d:b9:2b:fe:ae:20:59:3b:f1:74Certificate

Extended Key Usages

Key Usages

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

6b:3c:ed:16:4c:8b:7e:8d:07:17:53:14:71:67:7c:79:ce:e4:53:e6:3d:f0:86:f1:64:d7:c0:99:4b:19:10:8dSigner

2e:89:4b:61:06:e1:77:ba:c7:dd:26:c8:99:0d:ce:f3:8b:7a:e7:bfSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 376KB - Virtual size: 376KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

39:4f:2c:22:62:cc:2d:b9:2b:fe:ae:20:59:3b:f1:74
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

39:4f:2c:22:62:cc:2d:b9:2b:fe:ae:20:59:3b:f1:74
Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

6b:3c:ed:16:4c:8b:7e:8d:07:17:53:14:71:67:7c:79:ce:e4:53:e6:3d:f0:86:f1:64:d7:c0:99:4b:19:10:8d
Signer

2e:89:4b:61:06:e1:77:ba:c7:dd:26:c8:99:0d:ce:f3:8b:7a:e7:bf
Signer

.text
Size: 376KB - Virtual size: 376KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B