340bf531d49e56783b5332f55801092d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

340bf531d49e56783b5332f55801092d_JaffaCakes118
Size

1.3MB
MD5

340bf531d49e56783b5332f55801092d
SHA1

e256d3a77779fd2194027622926cb3d25cbbe555
SHA256

b73c22c57b16f4a451a7435fdd533ef7a8073ecb06e80a6695af5a7670dfb99e
SHA512

f9e6983417be4ab70a725da6b4c12573f889be0c00a64339ee3923a27ba8f7debba7728999a1478182e5ef3260c7c051d8a0f716a802781ba3f96fa5b5942c7a
SSDEEP

24576:wTvzAeWengqi9bx6yowamghd+bRZvce6jN/tX0yb7juXjl7ypln/En:wTLAeDgz9bUy/SdQlyZTbCjMpln/En

Score

1^/10

Malware Config

Signatures

Files

340bf531d49e56783b5332f55801092d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

bf:0c:b8:6a:53:f5:79:82:12:6c:22:6d:9f:51:f5:8f
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

16/06/2014, 00:00

Not After

16/06/2015, 23:59

Subject

CN=Media Labs Ltd,O=Media Labs Ltd,POSTALCODE=115230,STREET=Electrolitnii pr.\, 1-3,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

92:4b:e0:3b:b4:11:a8:8b:87:14:d1:8c:f9:b3:6c:0c:bb:e2:a5:fb
Signer

Actual PE Digest

92:4b:e0:3b:b4:11:a8:8b:87:14:d1:8c:f9:b3:6c:0c:bb:e2:a5:fb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ