0e058b28ee7d0973bef985ec9a06a4cb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0e058b28ee7d0973bef985ec9a06a4cb_JaffaCakes118
Size

1.7MB
MD5

0e058b28ee7d0973bef985ec9a06a4cb
SHA1

422c3807fe34196d35ab45c7ae0ea6cd1640c6ca
SHA256

06d5ea0f1d275963db09cd90ba5c7e0790bb52a4da343250acddbebab29a96bb
SHA512

e43f7daf9e52c5c4214ec789faff4811bcac57371d8b5da708a1878ffae7413d9855b851fe112d5c67592c178a3c90ccb181f100972e21d901939780d70145ae
SSDEEP

24576:boQeYzZwfvCyz63zzrDnzQT3wtnMCzmEMI4Wip:Xe0wfvD

Score

1^/10

Malware Config

Signatures

Files

0e058b28ee7d0973bef985ec9a06a4cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

25:69:e4:ab:23:84:a4:2d:d0:4b:2b:d5:46:1e:2f:c1:9f:06:d0:3e
Certificate

Issuer

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Not Before

16/02/2020, 14:38

Not After

16/03/2020, 14:38

Subject

CN=game source,C=US,1.2.840.113549.1.9.1=#0c1e67616d652d736f757263652d353840696e626f786b697474656e2e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e6
Certificate

Issuer

CN=Ascertia Root CA 2,O=Ascertia,C=GB

Not Before

21/04/2009, 12:15

Not After

14/04/2028, 23:59

Subject

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

01/08/2030, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

37:0d:7a:d4:ba:fd:4a:3b:54:d5:7b:81:45:46:4a:51:56:b4:61:78:38:9a:8c:0a:97:de:0c:46:4c:78:91:c5
Signer

Actual PE Digest

37:0d:7a:d4:ba:fd:4a:3b:54:d5:7b:81:45:46:4a:51:56:b4:61:78:38:9a:8c:0a:97:de:0c:46:4c:78:91:c5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 401KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

25:69:e4:ab:23:84:a4:2d:d0:4b:2b:d5:46:1e:2f:c1:9f:06:d0:3eCertificate

Extended Key Usages

Key Usages

e6Certificate

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

37:0d:7a:d4:ba:fd:4a:3b:54:d5:7b:81:45:46:4a:51:56:b4:61:78:38:9a:8c:0a:97:de:0c:46:4c:78:91:c5Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 401KB - Virtual size: 400KB

.sdata Size: 69KB - Virtual size: 68KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.reloc Size: 512B - Virtual size: 12B

25:69:e4:ab:23:84:a4:2d:d0:4b:2b:d5:46:1e:2f:c1:9f:06:d0:3e
Certificate

e6
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

37:0d:7a:d4:ba:fd:4a:3b:54:d5:7b:81:45:46:4a:51:56:b4:61:78:38:9a:8c:0a:97:de:0c:46:4c:78:91:c5
Signer

.text
Size: 401KB - Virtual size: 400KB

.sdata
Size: 69KB - Virtual size: 68KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.reloc
Size: 512B - Virtual size: 12B