6dffea1961a95c4d89a5d35a2db585f0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6dffea1961a95c4d89a5d35a2db585f0_JaffaCakes118
Size

12KB
MD5

6dffea1961a95c4d89a5d35a2db585f0
SHA1

ba5c6e71be9d1fe2bfdc6ab2256ca16f8a0a24e3
SHA256

b433586535bebc956b160d5a8c2cf7efadf1b573997c089afb5145e95d052f73
SHA512

e1ecb3e7c0e1c7ee548783e38247ed596b5b82fd229aef779d502bdbd215315c1ef23087fdeb54ef23a0c47178ba6550e0d0b38ab0ec18e3949ddda1944c16d5
SSDEEP

192:yEVXo3WfPoEzz93Znz/WkTlnzWlnUY31QnMTI/s/nGfe4pBjSjeDb:yEV33Znz/WkTFzWv1q//0GftpBjLDb

Score

1^/10

Malware Config

Signatures

Files

6dffea1961a95c4d89a5d35a2db585f0_JaffaCakes118
.dll windows:5 windows x64 arch:x64

Code Sign

33:00:00:00:33:e5:27:86:a3:0e:4a:2a:80:00:00:00:00:00:33
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

27/03/2013, 20:08

Not After

27/06/2014, 20:08

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/01/2013, 22:33

Not After

24/04/2014, 22:33

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:3f:80:26:46:e8:e2:c7:bb:3c:67:98:86:59:6f:63:b8:74:c1:b6
Signer

Actual PE Digest

08:3f:80:26:46:e8:e2:c7:bb:3c:67:98:86:59:6f:63:b8:74:c1:b6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:00:33:e5:27:86:a3:0e:4a:2a:80:00:00:00:00:00:33Certificate

Extended Key Usages

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0Certificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

08:3f:80:26:46:e8:e2:c7:bb:3c:67:98:86:59:6f:63:b8:74:c1:b6Signer

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 5KB - Virtual size: 8KB

33:00:00:00:33:e5:27:86:a3:0e:4a:2a:80:00:00:00:00:00:33
Certificate

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

08:3f:80:26:46:e8:e2:c7:bb:3c:67:98:86:59:6f:63:b8:74:c1:b6
Signer

.rsrc
Size: 5KB - Virtual size: 8KB