8736d4b3663567fa4350ce83083f0bcb_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8736d4b3663567fa4350ce83083f0bcb_JaffaCakes118
Size

567KB
MD5

8736d4b3663567fa4350ce83083f0bcb
SHA1

e91f34ea5e741402eb6fb4ca9c16e703928a5af2
SHA256

2b4a6ef807924dd10f65081a11ad5193c9334e9c8aea22cf0cfd90a65193d626
SHA512

a01a2183d4e9d0113dad8c65908c4d826f2f448fbbece61d1ad6bcd617a49a942bccd7ef63e374d6a93fcd87291ededb4ad8c58c6c10d81bc655acd073b46539
SSDEEP

12288:RM/VGR9lbM/VGR9leCOPUv8iMsVfmU8lRVrN:G/VGe/VG6s0iMgf8lRVrN

Score

1^/10

Malware Config

Signatures

Files

8736d4b3663567fa4350ce83083f0bcb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:00:f4:84:ef:dd:70:78:83:23:6f:00:00:00:00:00:f4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-06-2018 19:07

Not After

29-05-2019 19:07

Subject

CN=Skype Software Sarl,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b3:e6:d7:cf:4d:78:5c:84:09:a6:93:80:55:02:4b:5d:ca:cc:6f:dd:07:ca:70:92:82:8e:bb:c6:7d:4a:cf:1f
Signer

Actual PE Digest

b3:e6:d7:cf:4d:78:5c:84:09:a6:93:80:55:02:4b:5d:ca:cc:6f:dd:07:ca:70:92:82:8e:bb:c6:7d:4a:cf:1f

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 555KB - Virtual size: 554KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:00:f4:84:ef:dd:70:78:83:23:6f:00:00:00:00:00:f4Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

b3:e6:d7:cf:4d:78:5c:84:09:a6:93:80:55:02:4b:5d:ca:cc:6f:dd:07:ca:70:92:82:8e:bb:c6:7d:4a:cf:1fSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 555KB - Virtual size: 554KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:00:f4:84:ef:dd:70:78:83:23:6f:00:00:00:00:00:f4
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

b3:e6:d7:cf:4d:78:5c:84:09:a6:93:80:55:02:4b:5d:ca:cc:6f:dd:07:ca:70:92:82:8e:bb:c6:7d:4a:cf:1f
Signer

.text
Size: 555KB - Virtual size: 554KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 12B