5f96cffd883eeeba8ff3296dca4e450c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5f96cffd883eeeba8ff3296dca4e450c_JaffaCakes118
Size

424KB
MD5

5f96cffd883eeeba8ff3296dca4e450c
SHA1

80f1c73f1b858d9074ac7759d6a9a51646a8c55f
SHA256

e81ae51d70f71f356608ad0b72ce8747bf09af7d7734c59f9323488bc8516cbd
SHA512

ed6d41459c395466a9f632d7c449b794571e84324d26b89c305d388fdfe3f842b3ad9d8aae2846d00ebb713367cb65703254c761f4288069d2f96e5003343280
SSDEEP

6144:QdadU3UfcnyRVwwJCgttCeDqeYS7STC5zYKP8/5ypfKFtSUfsdjZEWM9Kv41DW3E:QdadU3v2wmhQ0QDQMFInEWMQaS74

Score

1^/10

Malware Config

Signatures

Files

5f96cffd883eeeba8ff3296dca4e450c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

03-07-2018 20:45

Not After

26-07-2019 20:45

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7d:d6:f9:b2:8f:5a:e9:ba:5f:8c:89:77:02:fe:d7:87:65:23:ca:d7:02:2e:ed:a7:0e:cf:6a:03:a6:d7:c5:e3
Signer

Actual PE Digest

7d:d6:f9:b2:8f:5a:e9:ba:5f:8c:89:77:02:fe:d7:87:65:23:ca:d7:02:2e:ed:a7:0e:cf:6a:03:a6:d7:c5:e3

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 373KB - Virtual size: 373KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

7d:d6:f9:b2:8f:5a:e9:ba:5f:8c:89:77:02:fe:d7:87:65:23:ca:d7:02:2e:ed:a7:0e:cf:6a:03:a6:d7:c5:e3Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 373KB - Virtual size: 373KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

7d:d6:f9:b2:8f:5a:e9:ba:5f:8c:89:77:02:fe:d7:87:65:23:ca:d7:02:2e:ed:a7:0e:cf:6a:03:a6:d7:c5:e3
Signer

.text
Size: 373KB - Virtual size: 373KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B