2b621665642c5d0b5ba3234bec68aba4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2b621665642c5d0b5ba3234bec68aba4_JaffaCakes118
Size

27KB
MD5

2b621665642c5d0b5ba3234bec68aba4
SHA1

a85eb176fe0f01d12d4f865997a917f734d0886d
SHA256

05742589b6379906c9e158c634187243c2b751553baa5fa33aa7149a95ca70df
SHA512

19d952eb0949ee126a730f3a493734bf782cd5d6c20a0acdcb3f2977980cd350c5311fcd97af09072dd33ca1ef39b01568f2adbe4a16fb6326b975ad2eba9d58
SSDEEP

384:df8NILZHIqIqN8lzaXH+IJ5OuJ5W6IJ5OuJ5TE3MUtMgSL6l8F:qNILZH+qN8invnWJnvnI3zWTF

Score

1^/10

Malware Config

Signatures

Files

2b621665642c5d0b5ba3234bec68aba4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

a1:bb:85:69:95:0c:0b:20:80:a1:1a:0e:2f:61:8b:33
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2013, 00:00

Not After

06/03/2016, 23:59

Subject

CN=Kimahri Software inc.,O=Kimahri Software inc.,POSTALCODE=H3A 1E7,STREET=666 Sherbrooke Rue w,L=Montreal,ST=Quebec,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f8:5c:77:f6:72:1d:59:86:98:ea:e9:49:3d:a5:d4:9d:97:07:3b:2b
Signer

Actual PE Digest

f8:5c:77:f6:72:1d:59:86:98:ea:e9:49:3d:a5:d4:9d:97:07:3b:2b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\shai\Crossrider\cr-ie-plugin\CS_test_websocket_client\CS_test_websocket_client\obj\Release\Torpedo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

a1:bb:85:69:95:0c:0b:20:80:a1:1a:0e:2f:61:8b:33Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bbCertificate

Extended Key Usages

Key Usages

f8:5c:77:f6:72:1d:59:86:98:ea:e9:49:3d:a5:d4:9d:97:07:3b:2bSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 21KB - Virtual size: 20KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

a1:bb:85:69:95:0c:0b:20:80:a1:1a:0e:2f:61:8b:33
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

f8:5c:77:f6:72:1d:59:86:98:ea:e9:49:3d:a5:d4:9d:97:07:3b:2b
Signer

.text
Size: 21KB - Virtual size: 20KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B