24f015a0607933116a98928a9c447a12_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

24f015a0607933116a98928a9c447a12_JaffaCakes118
Size

7.7MB
MD5

24f015a0607933116a98928a9c447a12
SHA1

e71f8129f77b1e71cba618378537081a33563499
SHA256

21a5064df48bb9b19fa42c07a635887e2da5fb8852b0f79e8107ba1a981b4ec6
SHA512

84dfe37ce45f0c3e25c5a2a5619d187cda40111ece2f27c86e1b30b9be9bb40ffd8872b311959dde042de2727fbbbf497c7a505d765ece6875b78bef71d66a41
SSDEEP

196608:Mi8LcEDa7iH+1/ZQjG7YR5+3Be7zk138nwvgMpY1CAR:MhLcEDa7iHEQjG7Io3Be7zknV6R

Score

1^/10

Malware Config

Signatures

Files

24f015a0607933116a98928a9c447a12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a604c6ea79d5ea984febff3382a81f77

Code Sign

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

bc:49:8d:83:ab:89:73:8d:09:90:b0:24:18:d2:6a:7e:cf:d9:60:00:05:90:f2:14:3e:07:ca:e1:fd:60:d2:b0
Signer

Actual PE Digest

bc:49:8d:83:ab:89:73:8d:09:90:b0:24:18:d2:6a:7e:cf:d9:60:00:05:90:f2:14:3e:07:ca:e1:fd:60:d2:b0

Digest Algorithm

sha256

PE Digest Matches

true

7b:d6:e3:ef:bb:1c:4a:45:aa:e6:b5:70:fb:de:74:e6:20:44:c8:be
Signer

Actual PE Digest

7b:d6:e3:ef:bb:1c:4a:45:aa:e6:b5:70:fb:de:74:e6:20:44:c8:be

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
CreateFileMappingA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 1024B - Virtual size: 521B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 597B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7.7MB - Virtual size: 7.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a604c6ea79d5ea984febff3382a81f77

Code Sign

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

bc:49:8d:83:ab:89:73:8d:09:90:b0:24:18:d2:6a:7e:cf:d9:60:00:05:90:f2:14:3e:07:ca:e1:fd:60:d2:b0Signer

7b:d6:e3:ef:bb:1c:4a:45:aa:e6:b5:70:fb:de:74:e6:20:44:c8:beSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 1024B - Virtual size: 521B

.rdata Size: 1024B - Virtual size: 597B

.rsrc Size: 7.7MB - Virtual size: 7.7MB

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

bc:49:8d:83:ab:89:73:8d:09:90:b0:24:18:d2:6a:7e:cf:d9:60:00:05:90:f2:14:3e:07:ca:e1:fd:60:d2:b0
Signer

7b:d6:e3:ef:bb:1c:4a:45:aa:e6:b5:70:fb:de:74:e6:20:44:c8:be
Signer

.text
Size: 1024B - Virtual size: 521B

.rdata
Size: 1024B - Virtual size: 597B

.rsrc
Size: 7.7MB - Virtual size: 7.7MB