87027e6a84534ef75d2ec0f5466ceb48_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

87027e6a84534ef75d2ec0f5466ceb48_JaffaCakes118
Size

426KB
MD5

87027e6a84534ef75d2ec0f5466ceb48
SHA1

ddaac54938e8b9a8a9e26f67f2af1236584d82e6
SHA256

c5e939e52d78478e69fbc8235d0afa2011d2dca2cda74ad607c1e2ba7b24a8bd
SHA512

23a3840474c7d3c60239d70faad8e2c12d1ae2900797f2f64c2b2d25b0b60466b60e73569607e8b3b99550fbe118e9340eedf56161416803a64e6eeee9722459
SSDEEP

6144:5b12vtO8VCMrueZNFnvtMkivB1z8g4Auf4u6u:P2vxVCMrxRnvtMkQBt8fAuf6u

Score

1^/10

Malware Config

Signatures

Files

87027e6a84534ef75d2ec0f5466ceb48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

01
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30-05-2000 10:48

Not After

30-05-2020 10:48

Subject

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ed:72:df:71:20:8f:78:36:d0:ab:00:9f:ca:97:e0:1f
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

22-12-2014 00:00

Not After

30-05-2020 10:48

Subject

CN=COMODO SHA-256 Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6c:d2:82:a2:d9:a2:c1:58:50:5b:17:8d:59:51:8b:7b
Certificate

Issuer

CN=COMODO SHA-256 Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

10-12-2015 00:00

Not After

01-12-2018 23:59

Subject

CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

01
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30-05-2000 10:48

Not After

30-05-2020 10:48

Subject

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ed:72:df:71:20:8f:78:36:d0:ab:00:9f:ca:97:e0:1f
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

22-12-2014 00:00

Not After

30-05-2020 10:48

Subject

CN=COMODO SHA-256 Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6c:d2:82:a2:d9:a2:c1:58:50:5b:17:8d:59:51:8b:7b
Certificate

Issuer

CN=COMODO SHA-256 Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

10-12-2015 00:00

Not After

01-12-2018 23:59

Subject

CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

f1:05:22:c1:c2:e5:97:00:8d:59:3c:8e:68:4d:60:5b:2e:87:78:71:76:f9:87:05:89:bd:f4:27:fe:13:b3:f0
Signer

Actual PE Digest

f1:05:22:c1:c2:e5:97:00:8d:59:3c:8e:68:4d:60:5b:2e:87:78:71:76:f9:87:05:89:bd:f4:27:fe:13:b3:f0

Digest Algorithm

sha256

PE Digest Matches

false

18:b0:98:3c:7e:84:e2:2d:9d:90:e4:c2:88:a8:67:b0:51:37:6e:63
Signer

Actual PE Digest

18:b0:98:3c:7e:84:e2:2d:9d:90:e4:c2:88:a8:67:b0:51:37:6e:63

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 411KB - Virtual size: 410KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

01Certificate

Key Usages

ed:72:df:71:20:8f:78:36:d0:ab:00:9f:ca:97:e0:1fCertificate

Extended Key Usages

Key Usages

6c:d2:82:a2:d9:a2:c1:58:50:5b:17:8d:59:51:8b:7bCertificate

Extended Key Usages

Key Usages

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

01Certificate

Key Usages

ed:72:df:71:20:8f:78:36:d0:ab:00:9f:ca:97:e0:1fCertificate

Extended Key Usages

Key Usages

6c:d2:82:a2:d9:a2:c1:58:50:5b:17:8d:59:51:8b:7bCertificate

Extended Key Usages

Key Usages

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

f1:05:22:c1:c2:e5:97:00:8d:59:3c:8e:68:4d:60:5b:2e:87:78:71:76:f9:87:05:89:bd:f4:27:fe:13:b3:f0Signer

18:b0:98:3c:7e:84:e2:2d:9d:90:e4:c2:88:a8:67:b0:51:37:6e:63Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 411KB - Virtual size: 410KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

01
Certificate

ed:72:df:71:20:8f:78:36:d0:ab:00:9f:ca:97:e0:1f
Certificate

6c:d2:82:a2:d9:a2:c1:58:50:5b:17:8d:59:51:8b:7b
Certificate

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

01
Certificate

ed:72:df:71:20:8f:78:36:d0:ab:00:9f:ca:97:e0:1f
Certificate

6c:d2:82:a2:d9:a2:c1:58:50:5b:17:8d:59:51:8b:7b
Certificate

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

f1:05:22:c1:c2:e5:97:00:8d:59:3c:8e:68:4d:60:5b:2e:87:78:71:76:f9:87:05:89:bd:f4:27:fe:13:b3:f0
Signer

18:b0:98:3c:7e:84:e2:2d:9d:90:e4:c2:88:a8:67:b0:51:37:6e:63
Signer

.text
Size: 411KB - Virtual size: 410KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B