7571507b7120016c4a8a2a2d324e159d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

7571507b7120016c4a8a2a2d324e159d_JaffaCakes118
Size

550KB
MD5

7571507b7120016c4a8a2a2d324e159d
SHA1

6c11cc049e265308772e40cda111530bb5c3aa03
SHA256

12047a021e45ae614740ec211cf5667e4d94bf19dbfff5cd3d033548375f7cf4
SHA512

7394f332d14bdd0449a1051d31e20c37a48d6d8463a02b1ec79faf0a3a9c68cb8174a16ab380a0f9b2a57e20215373ca496db320998bd705ff6e3f671c3b994b
SSDEEP

12288:NGp+SAMOZ9wa/KkzM0s5c4QxnR4oh+2pqeA3f:NGS9/rbsGXnKY0

Score

1^/10

Malware Config

Signatures

Files

7571507b7120016c4a8a2a2d324e159d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Code Sign

cb:bd:e7:c2:d4:33:56:80:52:b7:b4:4b:19:6d:fa:20
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07-11-2016 00:00

Not After

28-03-2017 23:59

Subject

CN=Blabrum OOO,O=Blabrum OOO,POSTALCODE=197342,STREET=ul. Beloostrovskaja\, d. 20\, liter B,L=Sankt-Peterburg,ST=Sankt-Peterburg Region,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19-01-2010 00:00

Not After

18-01-2038 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ec:a0:7d:c4:af:7a:9f:cf:db:db:c3:d6:f6:59:02:f8:50:b7:f0:3a
Signer

Actual PE Digest

ec:a0:7d:c4:af:7a:9f:cf:db:db:c3:d6:f6:59:02:f8:50:b7:f0:3a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 345KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tlnn
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zth
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bmfkz
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

cb:bd:e7:c2:d4:33:56:80:52:b7:b4:4b:19:6d:fa:20Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

ec:a0:7d:c4:af:7a:9f:cf:db:db:c3:d6:f6:59:02:f8:50:b7:f0:3aSigner

Headers

File Characteristics

Sections

.text Size: 345KB - Virtual size: 344KB

.rsrc Size: 141KB - Virtual size: 141KB

.tlnn Size: 11KB - Virtual size: 11KB

.zth Size: 32KB - Virtual size: 32KB

.bmfkz Size: 14KB - Virtual size: 14KB

cb:bd:e7:c2:d4:33:56:80:52:b7:b4:4b:19:6d:fa:20
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

ec:a0:7d:c4:af:7a:9f:cf:db:db:c3:d6:f6:59:02:f8:50:b7:f0:3a
Signer

.text
Size: 345KB - Virtual size: 344KB

.rsrc
Size: 141KB - Virtual size: 141KB

.tlnn
Size: 11KB - Virtual size: 11KB

.zth
Size: 32KB - Virtual size: 32KB

.bmfkz
Size: 14KB - Virtual size: 14KB