9a21ee0595e059ba8f2d2d4f28384db5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

9a21ee0595e059ba8f2d2d4f28384db5_JaffaCakes118
Size

3.2MB
MD5

9a21ee0595e059ba8f2d2d4f28384db5
SHA1

6bcde022c1e4edc06d9341a8044ac4d4f451e03e
SHA256

0297af212a5d94c0c3c249af95acb6f2489208bde1487c1fc34a03c9cc8946ff
SHA512

747353565eb8a6aa74a055d3b35af12a1e308cf0bdb0d8e92df3501762832e69a0af905fb2dbd66372edde572954e895f9da2fd3575969a2da7027e2f87f2984
SSDEEP

49152:ukKTqR6isaWQlhbUZBUO/w4kkcPArkE5tsWXCXidtHLuc+mlvbOsXi844YIoOmT2:u4Q9lQlh4Z/lvbOeDoTDcrqc

Score

1^/10

Malware Config

Signatures

Files

9a21ee0595e059ba8f2d2d4f28384db5_JaffaCakes118
.exe windows:4 windows x64 arch:x64

Code Sign

11:d4:37:ff:1f:81:96:37:0c:a6:ee:97:06:d0:cc:7e
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

14/03/2018, 00:00

Not After

13/03/2021, 23:59

Subject

CN=Frans Basson,O=Frans Basson,POSTALCODE=6155,STREET=19 Amherst Road,L=Canning Vale,ST=Western Australia,C=AU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

01/08/2030, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3f:07:9a:8b:e2:51:e6:31:db:54:57:35:de:47:7d:05:30:a9:d7:6a:4a:a3:79:3b:ae:64:48:ac:67:c8:e7:1d
Signer

Actual PE Digest

3f:07:9a:8b:e2:51:e6:31:db:54:57:35:de:47:7d:05:30:a9:d7:6a:4a:a3:79:3b:ae:64:48:ac:67:c8:e7:1d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

GEM4D.pdb

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 990B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

11:d4:37:ff:1f:81:96:37:0c:a6:ee:97:06:d0:cc:7eCertificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

3f:07:9a:8b:e2:51:e6:31:db:54:57:35:de:47:7d:05:30:a9:d7:6a:4a:a3:79:3b:ae:64:48:ac:67:c8:e7:1dSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.sdata Size: 1024B - Virtual size: 990B

.rsrc Size: 31KB - Virtual size: 30KB

11:d4:37:ff:1f:81:96:37:0c:a6:ee:97:06:d0:cc:7e
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

3f:07:9a:8b:e2:51:e6:31:db:54:57:35:de:47:7d:05:30:a9:d7:6a:4a:a3:79:3b:ae:64:48:ac:67:c8:e7:1d
Signer

.text
Size: 3.1MB - Virtual size: 3.1MB

.sdata
Size: 1024B - Virtual size: 990B

.rsrc
Size: 31KB - Virtual size: 30KB