b4d0865f5d61161fd74fd62d3c39cf6d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b4d0865f5d61161fd74fd62d3c39cf6d_JaffaCakes118
Size

612KB
MD5

b4d0865f5d61161fd74fd62d3c39cf6d
SHA1

88622d6cb447ff1e283d9acefc51d2df62392694
SHA256

eb785392ef000b22f3db65be0828ba58d0731e715173a514261a8a2844c9d6eb
SHA512

f8e3c7c95fb2dd68369d744fd29d5fa8ce15148d885be20ef7b88699f9b3808b13f5de02fb7cb77869825a554f0c07d17b5f7f1ddf217be18bb278a72975f4fe
SSDEEP

12288:c7ibzoWASTU9IDyF0ApKNaMTihdP5IFbxuEDJ8BT7f:clWdY6DUXpKNaMToP5Qw1L

Score

1^/10

Malware Config

Signatures

Files

b4d0865f5d61161fd74fd62d3c39cf6d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Code Sign

cb:bd:e7:c2:d4:33:56:80:52:b7:b4:4b:19:6d:fa:20
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/11/2016, 00:00

Not After

28/03/2017, 23:59

Subject

CN=Blabrum OOO,O=Blabrum OOO,POSTALCODE=197342,STREET=ul. Beloostrovskaja\, d. 20\, liter B,L=Sankt-Peterburg,ST=Sankt-Peterburg Region,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ca:4a:ff:d5:37:de:83:c5:89:77:6d:7b:31:b2:58:d8:5e:20:3b:66
Signer

Actual PE Digest

ca:4a:ff:d5:37:de:83:c5:89:77:6d:7b:31:b2:58:d8:5e:20:3b:66

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 373KB - Virtual size: 373KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yjzcld
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dcu
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sesvl
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

cb:bd:e7:c2:d4:33:56:80:52:b7:b4:4b:19:6d:fa:20Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

ca:4a:ff:d5:37:de:83:c5:89:77:6d:7b:31:b2:58:d8:5e:20:3b:66Signer

Headers

File Characteristics

Sections

.text Size: 373KB - Virtual size: 373KB

.rsrc Size: 170KB - Virtual size: 170KB

.yjzcld Size: 35KB - Virtual size: 34KB

.dcu Size: 24KB - Virtual size: 23KB

.sesvl Size: 4KB - Virtual size: 3KB

cb:bd:e7:c2:d4:33:56:80:52:b7:b4:4b:19:6d:fa:20
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

ca:4a:ff:d5:37:de:83:c5:89:77:6d:7b:31:b2:58:d8:5e:20:3b:66
Signer

.text
Size: 373KB - Virtual size: 373KB

.rsrc
Size: 170KB - Virtual size: 170KB

.yjzcld
Size: 35KB - Virtual size: 34KB

.dcu
Size: 24KB - Virtual size: 23KB

.sesvl
Size: 4KB - Virtual size: 3KB