b64932079b105c164b0d614cffa2b35f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
b64932079b105c164b0d614cffa2b35f_JaffaCakes118
Size 478KB
Sample240617-cd8clatbqj
SHA256 af34b7b792d6cf48b2842afd41ddc9dc7406a4677b5f5d1086ab705c046adb63
MD5 b64932079b105c164b0d614cffa2b35f
SHA1 e16635ee404ca1217423002f8713d8c425ff28a9
SHA512 82ce317a4cfbb459db68ae971f709f0ac22e93d5b4d220f384930674b6b06d726568ecd9915acab32e80e05f2c7a322c01048043036b4598fe8e3fa6aa189a91
SSDEEP 12288:8EuzArh5Z9Mf0J+ksqIeGL6vwFtFhHbZ/o4U7:Nrh5Z9MMAk+L6etFxNQ4s
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

b64932079b105c164b0d614cffa2b35f_JaffaCakes118

.exe 478KB

b64932079b105c164b0d614cffa2b35f_JaffaCakes118

IMPHASH 6df986f8d3f5498ad5d9dcc09b0c43f7
SHA256 af34b7b792d6cf48b2842afd41ddc9dc7406a4677b5f5d1086ab705c046adb63
MD5 b64932079b105c164b0d614cffa2b35f
SHA1 e16635ee404ca1217423002f8713d8c425ff28a9
SHA512 82ce317a4cfbb459db68ae971f709f0ac22e93d5b4d220f384930674b6b06d726568ecd9915acab32e80e05f2c7a322c01048043036b4598fe8e3fa6aa189a91
SSDEEP 12288:8EuzArh5Z9Mf0J+ksqIeGL6vwFtFhHbZ/o4U7:Nrh5Z9MMAk+L6etFxNQ4s
MD5 SHA1 SHA512 SSDEEP

Digest

f1:9a:2e:4c:00:9a:b5:27:8d:3b:41:67:d0:29:15:b9:ec:66:0e:13:ed:15:d6:8f:3f:7b:ab:54:2b:ab:9b:e7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Playtech PLC,O=Playtech PLC,L=Douglas,C=IM

Chains

Mar 28, 2020

CN=Playtech PLC,O=Playtech PLC,L=Douglas,C=IM

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

PE Signature issue

Digest

e3:f3:32:46:d3:44:12:c8:05:81:74:1e:31:5d:5f:1c:ed:6a:fb:02

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Playtech PLC,O=Playtech PLC,L=Douglas,C=IM

Chains

Mar 28, 2020

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=Playtech PLC,O=Playtech PLC,L=Douglas,C=IM

Serial Number

04:1c:df:b7:c1:3c:e5:4b:19:3d:a9:f6:49:1d:eb:a1

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 2, 2020 - Jan 6, 2023

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 22, 2014 - Jul 21, 2024

Subject

Serial Number

40:1a:c4:64:21:b3:13:21:03:0e:bb:e4:12:1a:c5:1d

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 2, 2008 - Dec 1, 2037

Subject

CN=Playtech PLC,O=Playtech PLC,L=Douglas,C=IM

Serial Number

7f:aa:d4:d3:ff:7b:07:fb:e9:fd:c3:b7:07:fb:79:2c

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 16, 2018 - Feb 15, 2021

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

b64932079b105c164b0d614cffa2b35f_JaffaCakes118

PE Signature issue

kernel32

ws2_32

wintrust

wininet

shlwapi

version

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

generic