ab1cb11d81dce6a4cecfb864506ca83a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab1cb11d81dce6a4cecfb864506ca83a_JaffaCakes118
Size

1.3MB
MD5

ab1cb11d81dce6a4cecfb864506ca83a
SHA1

f427e0372ea0294ff195e17b7db8acec135682a7
SHA256

83e6e3ff0d192ba0ab8b1deef2c519cbf8ae6f2ff056d05ed8a5b0bdf6c91df3
SHA512

2b4ec7b2ef0e342f586d0bca1de4fb91fe6c438de42fbb6b4b6ec6dd5cef008d3ef86843195555bf2c5db4e9282d246fec6df6c6b24ffd9d3554cefeaefe8879
SSDEEP

24576:YTvzAeWengqi9bx6yowamghd+bRZvce6jN/tX0yb7juXjl7ypln/Ez:YTLAeDgz9bUy/SdQlyZTbCjMpln/Ez

Score

1^/10

Malware Config

Signatures

Files

ab1cb11d81dce6a4cecfb864506ca83a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

bf:0c:b8:6a:53:f5:79:82:12:6c:22:6d:9f:51:f5:8f
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

16/06/2014, 00:00

Not After

16/06/2015, 23:59

Subject

CN=Media Labs Ltd,O=Media Labs Ltd,POSTALCODE=115230,STREET=Electrolitnii pr.\, 1-3,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

92:4b:e0:3b:b4:11:a8:8b:87:14:d1:8c:f9:b3:6c:0c:bb:e2:a5:fb
Signer

Actual PE Digest

92:4b:e0:3b:b4:11:a8:8b:87:14:d1:8c:f9:b3:6c:0c:bb:e2:a5:fb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ