682029a98952c8cf8d8882b5a7880339_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

682029a98952c8cf8d8882b5a7880339_JaffaCakes118
Size

30KB
MD5

682029a98952c8cf8d8882b5a7880339
SHA1

0455e2f35cfea3c59310333409c3842061f8b33f
SHA256

1062eb3a6700eac7ab592e146f150d5d962d917c8983a8343c25b65edd47eae3
SHA512

b1c14b4eb8c7626c0b935af65dd9fea836cc5173da9a93366be6144b99e9d40fe4bce43d6f2ad938efe66a5fca570efc4bdcceb76b37b81c7a96e37f4583aeed
SSDEEP

768:V/77oRtDo0xE/QsnQ3ZbuKUD0jHJory1ZPF+yZTf8ReZV:VP0DvxE/tk5uFD0jHyry1ZPF+yZTfou

Score

1^/10

Malware Config

Signatures

Files

682029a98952c8cf8d8882b5a7880339_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

02/08/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:06:b2:8c:b2:e4:d8:37:0e:3e:c1:57:b3:c5:b3:ff:12
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

16/12/2014, 13:36

Not After

17/12/2015, 13:36

Subject

CN=CONCEPTION SELECTION DISTRIBUTION INTERNATIONALE,OU=Xhopever,O=CONCEPTION SELECTION DISTRIBUTION INTERNATIONALE,L=Paris,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

e0:a8:91:a5:40:af:e0:76:02:7a:2c:67:24:fe:3a:44:c9:39:e5:d3
Signer

Actual PE Digest

e0:a8:91:a5:40:af:e0:76:02:7a:2c:67:24:fe:3a:44:c9:39:e5:d3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\CSDI\src\Updater2\Updater2\obj\x86\Debug\noconf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:00:00:00:00:01:31:89:c6:37:e8Certificate

Extended Key Usages

Key Usages

11:21:06:b2:8c:b2:e4:d8:37:0e:3e:c1:57:b3:c5:b3:ff:12Certificate

Extended Key Usages

Key Usages

e0:a8:91:a5:40:af:e0:76:02:7a:2c:67:24:fe:3a:44:c9:39:e5:d3Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 24KB - Virtual size: 23KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 12B

04:00:00:00:00:01:31:89:c6:37:e8
Certificate

11:21:06:b2:8c:b2:e4:d8:37:0e:3e:c1:57:b3:c5:b3:ff:12
Certificate

e0:a8:91:a5:40:af:e0:76:02:7a:2c:67:24:fe:3a:44:c9:39:e5:d3
Signer

.text
Size: 24KB - Virtual size: 23KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 12B