3d61bf444a682f393dd6691d54e3a7f5_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3d61bf444a682f393dd6691d54e3a7f5_JaffaCakes118
Size

253KB
MD5

3d61bf444a682f393dd6691d54e3a7f5
SHA1

04f6e66d231647f205584085445ca4d5b27a6983
SHA256

058f1e5e6a0bea10818871b84e85f34d2f6874eb804482a25265ef93865aa6c9
SHA512

fbc456b79759683a86317424c6ed6818423d057d605f143ee263c1efa63d4293eb79750b295502e411ec8f8dc71ad6ac0d2873621a16b5398a25d154efc7212a
SSDEEP

3072:qaMB4IcXaYczag7K4qgb11lc8/ShKbSDswzWqeJf4XXyQ2dF4pyyYd2dAevZ2+Ld:jMlcXaYcWg7BR104SDhWxKdyT+k6

Score

1^/10

Malware Config

Signatures

Files

3d61bf444a682f393dd6691d54e3a7f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

eb:0c:61:58:4d:77:62:28:55:3f:6d:8e:a2:f1:52:f7
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2015 00:00

Not After

10-05-2016 23:59

Subject

CN=CINELANGUAGE LTD.,O=CINELANGUAGE LTD.,POSTALCODE=PE29 2BA,STREET=7 POST STREET,L=HUNTINGDON,ST=CAMBRIDGESHIRE,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30-05-2000 10:48

Not After

30-05-2020 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e5:b2:09:37:a2:d1:e6:38:0d:a1:ee:7f:ce:b6:d7:ae:ba:cb:dc:9d
Signer

Actual PE Digest

e5:b2:09:37:a2:d1:e6:38:0d:a1:ee:7f:ce:b6:d7:ae:ba:cb:dc:9d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Work\Adcash\Setup\obj\x86\Release\blank.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

eb:0c:61:58:4d:77:62:28:55:3f:6d:8e:a2:f1:52:f7Certificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

e5:b2:09:37:a2:d1:e6:38:0d:a1:ee:7f:ce:b6:d7:ae:ba:cb:dc:9dSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 243KB - Virtual size: 243KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 12B

eb:0c:61:58:4d:77:62:28:55:3f:6d:8e:a2:f1:52:f7
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

e5:b2:09:37:a2:d1:e6:38:0d:a1:ee:7f:ce:b6:d7:ae:ba:cb:dc:9d
Signer

.text
Size: 243KB - Virtual size: 243KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 12B