8fa3e3732e9469543102dfccfa0c91bf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8fa3e3732e9469543102dfccfa0c91bf_JaffaCakes118
Size

1.3MB
MD5

8fa3e3732e9469543102dfccfa0c91bf
SHA1

77a9244f1bb2c07d9cdeadf8a6ede1818d1bd13d
SHA256

bf52c639e4c738bf25f615d8910ff9c749c2c7ac42adecd0bd969aded0a128ba
SHA512

ac9a5be8d6e13162045b224b72a892833844105735b20a8efbdc48d50165d0ca574901beb6855a62cc6cf96d398d7147bd6a8469f4fa3fc38e4d9e52e0837da9
SSDEEP

24576:fkVSkJ2QF5SHUH8x+c9F81TUofvh+U1R4qPbFoEtlw0pHVQYqo/bif:MVl0+S0Kbe1Q24U3/HVVzif

Score

1^/10

Malware Config

Signatures

Files

8fa3e3732e9469543102dfccfa0c91bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

43:66:54:9e:e1:a5:e9:49:b8:f8:92:e4:e1:f7:6c:d2
Certificate

Issuer

CN=NCLauncher

Not Before

04/06/2020, 05:23

Not After

31/12/2039, 23:59

Subject

CN=NCLauncher

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

01/08/2030, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

67:88:29:06:32:cb:3a:09:d0:c1:31:4d:16:2e:a8:32:8a:6a:9c:b0
Signer

Actual PE Digest

67:88:29:06:32:cb:3a:09:d0:c1:31:4d:16:2e:a8:32:8a:6a:9c:b0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

43:66:54:9e:e1:a5:e9:49:b8:f8:92:e4:e1:f7:6c:d2Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

67:88:29:06:32:cb:3a:09:d0:c1:31:4d:16:2e:a8:32:8a:6a:9c:b0Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rsrc Size: 18KB - Virtual size: 17KB

.reloc Size: 512B - Virtual size: 12B

43:66:54:9e:e1:a5:e9:49:b8:f8:92:e4:e1:f7:6c:d2
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

67:88:29:06:32:cb:3a:09:d0:c1:31:4d:16:2e:a8:32:8a:6a:9c:b0
Signer

.text
Size: 1.2MB - Virtual size: 1.2MB

.rsrc
Size: 18KB - Virtual size: 17KB

.reloc
Size: 512B - Virtual size: 12B