37a8434c485bd69d75281665daf3a25b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

37a8434c485bd69d75281665daf3a25b_JaffaCakes118
Size

20KB
MD5

37a8434c485bd69d75281665daf3a25b
SHA1

fc93f5546b381234cae82232a181cc6c8cd5c2c8
SHA256

dbc399b246c256585ed829b38d35238fdae554ef6fe3590af71012fb3a0452df
SHA512

997b2b1469eb99e4408bd26ccdd76c4ed91e151c9f486f9625be402e7dc51079a8dbf08ec4a19d860b5b46d98ea9c59e4c56e0e3f76666a323fee0bb4ee8e30a
SSDEEP

384:JcpXPfMqFhFk4Ipsw7gvb63zAAFGI+ILHplsMb3kgLq+rEh8vBF:WRPUCIfMvb63zplLdq+rs8vP

Score

1^/10

Malware Config

Signatures

Files

37a8434c485bd69d75281665daf3a25b_JaffaCakes118
.zip
jshelper64.dll
.dll windows:4 windows x64 arch:x64

Code Sign

04:00:00:00:00:01:25:07:1d:f9:af
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/11/2009, 10:00

Not After

18/03/2019, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:44:93:eb:60:3b:b8:97:aa:9a:e1:e8
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

19/01/2018, 10:58

Not After

20/01/2019, 10:58

Subject

SERIALNUMBER=110111-5872810,CN=J's Future Corp.,O=J's Future Corp.,STREET=1114\, 28\, Digital-ro 30-gil,L=Guro-gu,ST=Seoul,C=KR,1.3.6.1.4.1.311.60.2.1.3=#13024b52,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:90:20:77:61:c4:26:dd:94:50:03:0d
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

14/06/2018, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign TSA for Advanced - G3 - 003-01,O=GMO GlobalSign K.K.,C=JP

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

29/03/2029, 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

cd:d5:fd:ee:a5:01:ef:c9:ab:96:6a:37:2d:64:7e:50:78:c2:9b:c4:6c:b9:d0:88:e4:79:06:06:f1:99:72:bb
Signer

Actual PE Digest

cd:d5:fd:ee:a5:01:ef:c9:ab:96:6a:37:2d:64:7e:50:78:c2:9b:c4:6c:b9:d0:88:e4:79:06:06:f1:99:72:bb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\1.Project\1.Ad_App\jshelper_dll_new\jshelper\obj\x64\Debug\jshelper.pdb

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

04:00:00:00:00:01:25:07:1d:f9:afCertificate

Key Usages

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0fCertificate

Extended Key Usages

Key Usages

45:44:93:eb:60:3b:b8:97:aa:9a:e1:e8Certificate

Extended Key Usages

Key Usages

33:90:20:77:61:c4:26:dd:94:50:03:0dCertificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:31:89:c6:50:04Certificate

Key Usages

04:00:00:00:00:01:21:58:53:08:a2Certificate

Key Usages

cd:d5:fd:ee:a5:01:ef:c9:ab:96:6a:37:2d:64:7e:50:78:c2:9b:c4:6c:b9:d0:88:e4:79:06:06:f1:99:72:bbSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 32KB - Virtual size: 32KB

.rsrc Size: 1024B - Virtual size: 888B

04:00:00:00:00:01:25:07:1d:f9:af
Certificate

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

45:44:93:eb:60:3b:b8:97:aa:9a:e1:e8
Certificate

33:90:20:77:61:c4:26:dd:94:50:03:0d
Certificate

04:00:00:00:00:01:31:89:c6:50:04
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

cd:d5:fd:ee:a5:01:ef:c9:ab:96:6a:37:2d:64:7e:50:78:c2:9b:c4:6c:b9:d0:88:e4:79:06:06:f1:99:72:bb
Signer

.text
Size: 32KB - Virtual size: 32KB

.rsrc
Size: 1024B - Virtual size: 888B