0b854f20e056517fb10b98a0be90b215_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0b854f20e056517fb10b98a0be90b215_JaffaCakes118
Size

203KB
MD5

0b854f20e056517fb10b98a0be90b215
SHA1

ed509aa43ee7bba1294342022afe90c08f46d0a4
SHA256

14b0b6323487c1352b6dad86417ad503627a4adbe98ff928b2b5c1629a874cbc
SHA512

74632a24733e122d287cc93a01f016fc13131cb09283b1fd387d94aa26eebd70184c996d1a41c9b445a524de164c29ff3268f387ad9a885bf5eb35f2ad21e7cd
SSDEEP

6144:IcHqIhqFfzdMNVjTS4ObVUIA13HM0HXH3tk2E:1hqFfzdMNVjeXI3HRHXH32

Score

1^/10

Malware Config

Signatures

Files

0b854f20e056517fb10b98a0be90b215_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b3b84238de271facd907ccf595edf4da

Code Sign

fb:fd:4a:5f:bc:2f:45:38:e5:df:76:03:f1:b0:a4:8c
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

16/12/2014, 00:00

Not After

16/12/2015, 23:59

Subject

CN=CR7 Team (Bright Circle Investments Ltd),O=CR7 Team (Bright Circle Investments Ltd),POSTALCODE=2025,STREET=Dasoupoli Strovolos+STREET=Athinodorou 3,L=Nicosia,ST=Nicosia,C=CY

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

00:7f:ae:4f:42:08:a4:f6:95:56:52:62:64:30:eb:bb:e7:7b:d0:d4
Signer

Actual PE Digest

00:7f:ae:4f:42:08:a4:f6:95:56:52:62:64:30:eb:bb:e7:7b:d0:d4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
WriteFile
ReadFile
SetFilePointer
CloseHandle
GetModuleFileNameA
GetCommandLineA
CreateFileA

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 347B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 366B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3b84238de271facd907ccf595edf4da

Code Sign

fb:fd:4a:5f:bc:2f:45:38:e5:df:76:03:f1:b0:a4:8cCertificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bbCertificate

Extended Key Usages

Key Usages

00:7f:ae:4f:42:08:a4:f6:95:56:52:62:64:30:eb:bb:e7:7b:d0:d4Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

Sections

.text Size: 512B - Virtual size: 347B

.rdata Size: 512B - Virtual size: 366B

fb:fd:4a:5f:bc:2f:45:38:e5:df:76:03:f1:b0:a4:8c
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

00:7f:ae:4f:42:08:a4:f6:95:56:52:62:64:30:eb:bb:e7:7b:d0:d4
Signer

.text
Size: 512B - Virtual size: 347B

.rdata
Size: 512B - Virtual size: 366B