5939bad044a5763658873d93bb168048_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5939bad044a5763658873d93bb168048_JaffaCakes118
Size

386KB
MD5

5939bad044a5763658873d93bb168048
SHA1

aa97178e23ee1f442c6dcc2c16b0ca632c32e4f1
SHA256

dc9a63c4952c68974b6a42faeb959119dddcaa78e6c65e3d3eb22c6ac49ee463
SHA512

baf4f53ea274d8daba786bf5b74dd4640967483e36b004a4fe3213e8f1c73c35be53cf5a393206de04800a24b4e5d68a74268a7efdb9ea28b4f059f19b1227f3
SSDEEP

6144:PTzsTPy5qcT84lqPw/fGajt9hmbGi1dTTgIoxTfOBqKu:PT0Py5D6AG8t9hmKi1dTTgIM7+u

Score

1^/10

Malware Config

Signatures

Files

5939bad044a5763658873d93bb168048_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

01
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30-05-2000 10:48

Not After

30-05-2020 10:48

Subject

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ed:72:df:71:20:8f:78:36:d0:ab:00:9f:ca:97:e0:1f
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

22-12-2014 00:00

Not After

30-05-2020 10:48

Subject

CN=COMODO SHA-256 Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6c:d2:82:a2:d9:a2:c1:58:50:5b:17:8d:59:51:8b:7b
Certificate

Issuer

CN=COMODO SHA-256 Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

10-12-2015 00:00

Not After

01-12-2018 23:59

Subject

CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

01
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30-05-2000 10:48

Not After

30-05-2020 10:48

Subject

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ed:72:df:71:20:8f:78:36:d0:ab:00:9f:ca:97:e0:1f
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

22-12-2014 00:00

Not After

30-05-2020 10:48

Subject

CN=COMODO SHA-256 Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6c:d2:82:a2:d9:a2:c1:58:50:5b:17:8d:59:51:8b:7b
Certificate

Issuer

CN=COMODO SHA-256 Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

10-12-2015 00:00

Not After

01-12-2018 23:59

Subject

CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6d:78:84:26:ed:c4:e7:dc:9b:20:52:50:42:1b:ed:3c:65:5a:0b:2d:41:43:1c:18:16:f8:94:29:f1:e1:e9:10
Signer

Actual PE Digest

6d:78:84:26:ed:c4:e7:dc:9b:20:52:50:42:1b:ed:3c:65:5a:0b:2d:41:43:1c:18:16:f8:94:29:f1:e1:e9:10

Digest Algorithm

sha256

PE Digest Matches

false

d1:2f:ff:0f:65:42:2c:9f:46:a7:56:d4:10:a4:69:f9:36:d0:de:a5
Signer

Actual PE Digest

d1:2f:ff:0f:65:42:2c:9f:46:a7:56:d4:10:a4:69:f9:36:d0:de:a5

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 371KB - Virtual size: 370KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

01Certificate

Key Usages

ed:72:df:71:20:8f:78:36:d0:ab:00:9f:ca:97:e0:1fCertificate

Extended Key Usages

Key Usages

6c:d2:82:a2:d9:a2:c1:58:50:5b:17:8d:59:51:8b:7bCertificate

Extended Key Usages

Key Usages

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

01Certificate

Key Usages

ed:72:df:71:20:8f:78:36:d0:ab:00:9f:ca:97:e0:1fCertificate

Extended Key Usages

Key Usages

6c:d2:82:a2:d9:a2:c1:58:50:5b:17:8d:59:51:8b:7bCertificate

Extended Key Usages

Key Usages

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

6d:78:84:26:ed:c4:e7:dc:9b:20:52:50:42:1b:ed:3c:65:5a:0b:2d:41:43:1c:18:16:f8:94:29:f1:e1:e9:10Signer

d1:2f:ff:0f:65:42:2c:9f:46:a7:56:d4:10:a4:69:f9:36:d0:de:a5Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 371KB - Virtual size: 370KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

01
Certificate

ed:72:df:71:20:8f:78:36:d0:ab:00:9f:ca:97:e0:1f
Certificate

6c:d2:82:a2:d9:a2:c1:58:50:5b:17:8d:59:51:8b:7b
Certificate

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

01
Certificate

ed:72:df:71:20:8f:78:36:d0:ab:00:9f:ca:97:e0:1f
Certificate

6c:d2:82:a2:d9:a2:c1:58:50:5b:17:8d:59:51:8b:7b
Certificate

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

6d:78:84:26:ed:c4:e7:dc:9b:20:52:50:42:1b:ed:3c:65:5a:0b:2d:41:43:1c:18:16:f8:94:29:f1:e1:e9:10
Signer

d1:2f:ff:0f:65:42:2c:9f:46:a7:56:d4:10:a4:69:f9:36:d0:de:a5
Signer

.text
Size: 371KB - Virtual size: 370KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B