8b38e7f2f3675e89e89740c26f7a89e0_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8b38e7f2f3675e89e89740c26f7a89e0_JaffaCakes118
Size

758KB
MD5

8b38e7f2f3675e89e89740c26f7a89e0
SHA1

641eaa13eed17565ff63b85e02ad1a892f07c868
SHA256

2a0b2e79ef4290631debaa50b87fd6ef665ba14b25dd2e7b5339ccda48768c6c
SHA512

b48d8597a50e860cd9d7ed95eb9d4cb956c584ad5d82228744de2de0eaae435782d99f2fe1c844e110983a9cd746e0278faa958a87526192efe9f97436f77aeb
SSDEEP

12288:djnVph7l6DtS3bApWfs+cM6nfGvl9uH1W7SrwWar+:djnISQ9rMgfG7Y1W+sW4+

Score

1^/10

Malware Config

Signatures

Files

8b38e7f2f3675e89e89740c26f7a89e0_JaffaCakes118
.exe windows:5 windows x64 arch:x64

caa5e6a2892587c2324418efee31c648

Code Sign

0c:15:be:4a:15:bb:09:03:c9:01:b1:d6:c2:65:30:2f
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/11/2018, 00:00

Not After

17/11/2021, 12:00

Subject

CN=Google LLC,O=Google LLC,L=Mountain View,ST=ca,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6f:01:32:31:37:2a:4f:ce:d7:b1:ff:4d:75:f8:50:a2:ed:71:e8:02:bc:e3:2c:68:00:17:19:9b:cf:e9:af:a5
Signer

Actual PE Digest

6f:01:32:31:37:2a:4f:ce:d7:b1:ff:4d:75:f8:50:a2:ed:71:e8:02:bc:e3:2c:68:00:17:19:9b:cf:e9:af:a5

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

wsock32

WSACleanup

winmm

mixerOpen

version

VerQueryValueW

comctl32

ImageList_Create

psapi

GetModuleBaseNameW

user32

GetDC

gdi32

BitBlt

comdlg32

GetOpenFileNameW

advapi32

RegCloseKey

shell32

DragFinish

ole32

CoGetObject

oleaut32

SafeArrayGetLBound

Sections

.MPRESS1
Size: 379KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 368KB - Virtual size: 367KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

caa5e6a2892587c2324418efee31c648

Code Sign

0c:15:be:4a:15:bb:09:03:c9:01:b1:d6:c2:65:30:2fCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

6f:01:32:31:37:2a:4f:ce:d7:b1:ff:4d:75:f8:50:a2:ed:71:e8:02:bc:e3:2c:68:00:17:19:9b:cf:e9:af:a5Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

wsock32

winmm

version

comctl32

psapi

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.MPRESS1 Size: 379KB - Virtual size: 1.4MB

.MPRESS2 Size: 4KB - Virtual size: 3KB

.rsrc Size: 368KB - Virtual size: 367KB

0c:15:be:4a:15:bb:09:03:c9:01:b1:d6:c2:65:30:2f
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

6f:01:32:31:37:2a:4f:ce:d7:b1:ff:4d:75:f8:50:a2:ed:71:e8:02:bc:e3:2c:68:00:17:19:9b:cf:e9:af:a5
Signer

.MPRESS1
Size: 379KB - Virtual size: 1.4MB

.MPRESS2
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 368KB - Virtual size: 367KB