15e478cb4346839830a907fe563bea42_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

15e478cb4346839830a907fe563bea42_JaffaCakes118
Size

789KB
MD5

15e478cb4346839830a907fe563bea42
SHA1

b4db0de1c3e1f3a7ad8275d96abb054b51ad9478
SHA256

df08d4442d347eada08440f4980b4fd351baba3230155fd2018851e51ab9394e
SHA512

2bd62b424c86365a560d903f63997a864840a24880887f889b19e990d0b096071055fae8600e2ec42ead812617ca891b9d414330cba273ed32f244a77e898644
SSDEEP

12288:h1xGcT+7STCzGALNoNFEtPY6PdRVbDXglS91C/HH8xNxLWlJMhq9l8NP/brBp:h1xfTE3n6Ot1C/8DxLWQDrBp

Score

1^/10

Malware Config

Signatures

Files

15e478cb4346839830a907fe563bea42_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Code Sign

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

13-04-2019 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:73:d9:77:d8:02:c6:a1:09:c6:de:2c:5c:7d:d7:a5:0f
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

04-05-2015 12:02

Not After

04-05-2016 12:02

Subject

CN=Prompt Connector (Fried Coieok Ltd),O=Prompt Connector (Fried Coieok Ltd),L=Tel Aviv,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

e9:b1:0e:d7:14:b3:ac:a5:f0:40:82:b9:c0:c5:da:25:04:c8:99:bd
Signer

Actual PE Digest

e9:b1:0e:d7:14:b3:ac:a5:f0:40:82:b9:c0:c5:da:25:04:c8:99:bd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

04:00:00:00:00:01:2f:4e:e1:35:5cCertificate

Extended Key Usages

Key Usages

11:21:73:d9:77:d8:02:c6:a1:09:c6:de:2c:5c:7d:d7:a5:0fCertificate

Extended Key Usages

Key Usages

e9:b1:0e:d7:14:b3:ac:a5:f0:40:82:b9:c0:c5:da:25:04:c8:99:bdSigner

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 39KB - Virtual size: 39KB

DATA Size: 1024B - Virtual size: 592B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 64KB - Virtual size: 64KB

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

11:21:73:d9:77:d8:02:c6:a1:09:c6:de:2c:5c:7d:d7:a5:0f
Certificate

e9:b1:0e:d7:14:b3:ac:a5:f0:40:82:b9:c0:c5:da:25:04:c8:99:bd
Signer

CODE
Size: 39KB - Virtual size: 39KB

DATA
Size: 1024B - Virtual size: 592B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 64KB - Virtual size: 64KB