6c8fbe5f101bd928862a47d95ea90903_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

6c8fbe5f101bd928862a47d95ea90903_JaffaCakes118
Size

792KB
MD5

6c8fbe5f101bd928862a47d95ea90903
SHA1

c6634bdf8b5a1b5f45903f8755ae524ee1205138
SHA256

73e86b788261e8a4b97b6922627e3710235f97a69d68d9f950f195dbf0481687
SHA512

1280b8ec3b1c7ef7a1c1f4fc332aa603dafc5661507ce0b459bf9cb21a84793392f83b53fa3d0a8e624003651bbf621d69c37c03458c64f3f8ce02c88cfe46f4
SSDEEP

24576:VCHv3YrXNfyvJToSSLwnNCDwQDImcViQM3bN:Vs3YtE8zmMDwgcah

Score

1^/10

Malware Config

Signatures

Files

6c8fbe5f101bd928862a47d95ea90903_JaffaCakes118
.eml
- https://www.avg.com
02_2019_Order_Package_20180329_06575998876_2019_signed.PDF.z
.ace
out.ace
.ace
02_2019_Order_Package_20180329_06575998876_2019_signed.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:00:c5:96:40:60:4b:f4:de:ae:2e:00:00:00:00:00:c5
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:11

Not After

11-08-2018 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17-11-2016 22:09

Not After

17-02-2018 22:09

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

75:af:13:aa:a6:7e:8b:7f:69:5f:9c:84:2b:79:e5:e2:64:9b:b6:9a:13:04:1e:7f:94:87:b2:34:8c:07:58:7b
Signer

Actual PE Digest

75:af:13:aa:a6:7e:8b:7f:69:5f:9c:84:2b:79:e5:e2:64:9b:b6:9a:13:04:1e:7f:94:87:b2:34:8c:07:58:7b

Digest Algorithm

sha256

PE Digest Matches

false

58:8d:1e:bd:6d:e5:cc:1b:14:b9:57:79:0c:e2:37:57:fc:8c:cf:3a
Signer

Actual PE Digest

58:8d:1e:bd:6d:e5:cc:1b:14:b9:57:79:0c:e2:37:57:fc:8c:cf:3a

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 355KB - Virtual size: 355KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 575KB - Virtual size: 575KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-plain-1.txt

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:00:c5:96:40:60:4b:f4:de:ae:2e:00:00:00:00:00:c5Certificate

Extended Key Usages

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79Certificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8eCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

75:af:13:aa:a6:7e:8b:7f:69:5f:9c:84:2b:79:e5:e2:64:9b:b6:9a:13:04:1e:7f:94:87:b2:34:8c:07:58:7bSigner

58:8d:1e:bd:6d:e5:cc:1b:14:b9:57:79:0c:e2:37:57:fc:8c:cf:3aSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 355KB - Virtual size: 355KB

.rsrc Size: 575KB - Virtual size: 575KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:00:c5:96:40:60:4b:f4:de:ae:2e:00:00:00:00:00:c5
Certificate

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

75:af:13:aa:a6:7e:8b:7f:69:5f:9c:84:2b:79:e5:e2:64:9b:b6:9a:13:04:1e:7f:94:87:b2:34:8c:07:58:7b
Signer

58:8d:1e:bd:6d:e5:cc:1b:14:b9:57:79:0c:e2:37:57:fc:8c:cf:3a
Signer

.text
Size: 355KB - Virtual size: 355KB

.rsrc
Size: 575KB - Virtual size: 575KB

.reloc
Size: 512B - Virtual size: 12B