6fac9759fca3c5edba35d2fe7dac1e7e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6fac9759fca3c5edba35d2fe7dac1e7e_JaffaCakes118
Size

365KB
MD5

6fac9759fca3c5edba35d2fe7dac1e7e
SHA1

1f5a2bff74a5ea98e3a67c04b3f1fb6ca82be2d4
SHA256

050455567357bffe9f4337adb25cf95b3e1ddca7a719eb997b52e9a0511e16b9
SHA512

d04c68185f1b9f9ef36981b64458fff68c30195ab073bea2ef61b8228e5bc4a05894f2e2a0aa8c43eddea955f1ef7909ff6920236a76ea13091cf3701031dff9
SSDEEP

6144:YfGDpgMIC9fphcJhL1ca1mWfGDpgMIC9fphcJhL1ca1mn:MGy+9RhcXLC+m+Gy+9RhcXLC+mn

Score

1^/10

Malware Config

Signatures

Files

6fac9759fca3c5edba35d2fe7dac1e7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

1b:e7:15
Certificate

Issuer

OU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\, Inc.,C=US

Not Before

01/01/2014, 07:00

Not After

30/05/2031, 07:00

Subject

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

07
Certificate

Issuer

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1c:df:52:3d:25:22:7a:4c
Certificate

Issuer

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

27/09/2016, 02:34

Not After

01/10/2017, 15:36

Subject

CN=Enterra Holdings Inc,O=Enterra Holdings Inc,L=Tampa,ST=Florida,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1b:e7:15
Certificate

Issuer

OU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\, Inc.,C=US

Not Before

01/01/2014, 07:00

Not After

30/05/2031, 07:00

Subject

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

07
Certificate

Issuer

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1c:df:52:3d:25:22:7a:4c
Certificate

Issuer

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

27/09/2016, 02:34

Not After

01/10/2017, 15:36

Subject

CN=Enterra Holdings Inc,O=Enterra Holdings Inc,L=Tampa,ST=Florida,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

47:e3:57:1d:44:ad:38:19:41:f8:44:af:d3:02:79:b7:2e:bb:4a:55
Signer

Actual PE Digest

47:e3:57:1d:44:ad:38:19:41:f8:44:af:d3:02:79:b7:2e:bb:4a:55

Digest Algorithm

sha1

PE Digest Matches

true

dd:19:bb:4f:83:e3:f4:cd:42:05:1c:e8:c6:4b:1c:14:e4:d7:ab:b4:5f:2b:8f:73:e8:63:5f:bb:d7:06:b8:07
Signer

Actual PE Digest

dd:19:bb:4f:83:e3:f4:cd:42:05:1c:e8:c6:4b:1c:14:e4:d7:ab:b4:5f:2b:8f:73:e8:63:5f:bb:d7:06:b8:07

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 176KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

1b:e7:15Certificate

Key Usages

07Certificate

Key Usages

1c:df:52:3d:25:22:7a:4cCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

1b:e7:15Certificate

Key Usages

07Certificate

Key Usages

1c:df:52:3d:25:22:7a:4cCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

47:e3:57:1d:44:ad:38:19:41:f8:44:af:d3:02:79:b7:2e:bb:4a:55Signer

dd:19:bb:4f:83:e3:f4:cd:42:05:1c:e8:c6:4b:1c:14:e4:d7:ab:b4:5f:2b:8f:73:e8:63:5f:bb:d7:06:b8:07Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 176KB - Virtual size: 174KB

.rsrc Size: 164KB - Virtual size: 162KB

.reloc Size: 4KB - Virtual size: 12B

1b:e7:15
Certificate

07
Certificate

1c:df:52:3d:25:22:7a:4c
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

1b:e7:15
Certificate

07
Certificate

1c:df:52:3d:25:22:7a:4c
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

47:e3:57:1d:44:ad:38:19:41:f8:44:af:d3:02:79:b7:2e:bb:4a:55
Signer

dd:19:bb:4f:83:e3:f4:cd:42:05:1c:e8:c6:4b:1c:14:e4:d7:ab:b4:5f:2b:8f:73:e8:63:5f:bb:d7:06:b8:07
Signer

.text
Size: 176KB - Virtual size: 174KB

.rsrc
Size: 164KB - Virtual size: 162KB

.reloc
Size: 4KB - Virtual size: 12B