95524ba76c63275b276db0f8505c72df_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

95524ba76c63275b276db0f8505c72df_JaffaCakes118
Size

205KB
MD5

95524ba76c63275b276db0f8505c72df
SHA1

20dbd068fecd875f215d1da5221686cfac25111e
SHA256

81253f930ff01d176f529c1b11f72c54765791b207633d47edbbff87eda3105c
SHA512

144082234ed2fb10921a998eebbca03b8d9542424b6e7a13a129382749ded6d251323975664db9984267287ea3618d33995450a776d6ddb19cdfe583425301a0
SSDEEP

3072:vICpolBwcfF2FrxSF1n/sIjjffgPzCWkTnsxmENkxMmOVtg:wCpolBwcfqwf/sAffgrCWkTsxDNkVOL

Score

1^/10

Malware Config

Signatures

Files

95524ba76c63275b276db0f8505c72df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

1a:ee:bb:fa:48:c8:af:40:79:48:9f:54:ad:e9:7f:fe:84:5b:0d:34
Certificate

Issuer

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Not Before

26/09/2020, 16:42

Not After

26/10/2020, 16:42

Subject

CN=UDefCore,OU=Developer,O=AntiCheat,C=BY,1.2.840.113549.1.9.1=#0c0d6169406167656e746f2e70726f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

01/08/2030, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e6
Certificate

Issuer

CN=Ascertia Root CA 2,O=Ascertia,C=GB

Not Before

21/04/2009, 12:15

Not After

14/04/2028, 23:59

Subject

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:ee:bb:fa:48:c8:af:40:79:48:9f:54:ad:e9:7f:fe:84:5b:0d:34
Certificate

Issuer

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Not Before

26/09/2020, 16:42

Not After

26/10/2020, 16:42

Subject

CN=UDefCore,OU=Developer,O=AntiCheat,C=BY,1.2.840.113549.1.9.1=#0c0d6169406167656e746f2e70726f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e6
Certificate

Issuer

CN=Ascertia Root CA 2,O=Ascertia,C=GB

Not Before

21/04/2009, 12:15

Not After

14/04/2028, 23:59

Subject

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

01/08/2030, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8d:fa:62:a8:8c:a5:4b:53:b0:75:91:e9:1b:49:5d:53:07:50:ee:0f:47:02:d5:e5:9c:53:df:47:55:74:8b:d9
Signer

Actual PE Digest

8d:fa:62:a8:8c:a5:4b:53:b0:75:91:e9:1b:49:5d:53:07:50:ee:0f:47:02:d5:e5:9c:53:df:47:55:74:8b:d9

Digest Algorithm

sha256

PE Digest Matches

true

31:2a:4d:25:a0:70:80:9d:80:02:34:18:a8:68:53:84:e0:5b:22:5e
Signer

Actual PE Digest

31:2a:4d:25:a0:70:80:9d:80:02:34:18:a8:68:53:84:e0:5b:22:5e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

1a:ee:bb:fa:48:c8:af:40:79:48:9f:54:ad:e9:7f:fe:84:5b:0d:34Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

e6Certificate

Key Usages

1a:ee:bb:fa:48:c8:af:40:79:48:9f:54:ad:e9:7f:fe:84:5b:0d:34Certificate

Extended Key Usages

Key Usages

e6Certificate

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

8d:fa:62:a8:8c:a5:4b:53:b0:75:91:e9:1b:49:5d:53:07:50:ee:0f:47:02:d5:e5:9c:53:df:47:55:74:8b:d9Signer

31:2a:4d:25:a0:70:80:9d:80:02:34:18:a8:68:53:84:e0:5b:22:5eSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 186KB - Virtual size: 185KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

1a:ee:bb:fa:48:c8:af:40:79:48:9f:54:ad:e9:7f:fe:84:5b:0d:34
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

e6
Certificate

1a:ee:bb:fa:48:c8:af:40:79:48:9f:54:ad:e9:7f:fe:84:5b:0d:34
Certificate

e6
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8d:fa:62:a8:8c:a5:4b:53:b0:75:91:e9:1b:49:5d:53:07:50:ee:0f:47:02:d5:e5:9c:53:df:47:55:74:8b:d9
Signer

31:2a:4d:25:a0:70:80:9d:80:02:34:18:a8:68:53:84:e0:5b:22:5e
Signer

.text
Size: 186KB - Virtual size: 185KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B