b6fb2f4bce2204abc78bc5b1025bbb1d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b6fb2f4bce2204abc78bc5b1025bbb1d_JaffaCakes118
Size

464KB
MD5

b6fb2f4bce2204abc78bc5b1025bbb1d
SHA1

b61a07a9dab97bb38c3abd1577a9fc6794261ffc
SHA256

9e52dce2e52867565df1f0c3294629f32830b4c9dfb663471ff613695a011a83
SHA512

3cc5dbf17c80ccda245b864127676e7ec270efad9a86d2e184a9f00e7c201fc05df5b1c0b423538533c9588ddb10cbe837eb2a64038ede5c918b6d5545eafa03
SSDEEP

12288:2UAOTRYAOFvJ8y1en4KGs5OV8Um4VKtzy8mIhRBP/4f+m:lRBy1e4KG0V4VKtzy8mI5Pgf3

Score

1^/10

Malware Config

Signatures

Files

b6fb2f4bce2204abc78bc5b1025bbb1d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4bfa6e825a4206816ed8756369bf3f15

Code Sign

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2031 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:1c:df:b7:c1:3c:e5:4b:19:3d:a9:f6:49:1d:eb:a1
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

02-01-2020 00:00

Not After

06-01-2023 12:00

Subject

CN=Playtech PLC,O=Playtech PLC,L=Douglas,C=IM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22-07-2014 00:00

Not After

21-07-2024 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

40:1a:c4:64:21:b3:13:21:03:0e:bb:e4:12:1a:c5:1d
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

02-04-2008 00:00

Not After

01-12-2037 23:59

Subject

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7f:aa:d4:d3:ff:7b:07:fb:e9:fd:c3:b7:07:fb:79:2c
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

16-02-2018 00:00

Not After

15-02-2021 23:59

Subject

CN=Playtech PLC,O=Playtech PLC,L=Douglas,C=IM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

ea:c7:40:f2:a3:ac:73:7d:79:ab:a9:01:d4:c9:83:93:ea:c5:6c:60:06:d3:1b:57:8a:d7:07:56:8d:c2:77:0d
Signer

Actual PE Digest

ea:c7:40:f2:a3:ac:73:7d:79:ab:a9:01:d4:c9:83:93:ea:c5:6c:60:06:d3:1b:57:8a:d7:07:56:8d:c2:77:0d

Digest Algorithm

sha256

PE Digest Matches

true

53:72:da:e9:6f:36:47:98:f0:a8:8c:50:23:d1:7f:b2:4e:20:0c:bf
Signer

Actual PE Digest

53:72:da:e9:6f:36:47:98:f0:a8:8c:50:23:d1:7f:b2:4e:20:0c:bf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

wsock32

inet_addr

wintrust

WinVerifyTrustEx

wininet

HttpOpenRequestA

shlwapi

SHDeleteKeyW

version

VerQueryValueW

user32

CharLowerW

gdi32

SetBkMode

advapi32

RegSetValueExW

shell32

SHBrowseForFolderW

ole32

CoCreateInstance

oleaut32

SysAllocString

comctl32

ord17

Sections

.text
Size: 390KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4bfa6e825a4206816ed8756369bf3f15

Code Sign

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39Certificate

Key Usages

04:1c:df:b7:c1:3c:e5:4b:19:3d:a9:f6:49:1d:eb:a1Certificate

Extended Key Usages

Key Usages

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8Certificate

Extended Key Usages

Key Usages

40:1a:c4:64:21:b3:13:21:03:0e:bb:e4:12:1a:c5:1dCertificate

Key Usages

7f:aa:d4:d3:ff:7b:07:fb:e9:fd:c3:b7:07:fb:79:2cCertificate

Extended Key Usages

Key Usages

ea:c7:40:f2:a3:ac:73:7d:79:ab:a9:01:d4:c9:83:93:ea:c5:6c:60:06:d3:1b:57:8a:d7:07:56:8d:c2:77:0dSigner

53:72:da:e9:6f:36:47:98:f0:a8:8c:50:23:d1:7f:b2:4e:20:0c:bfSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

wsock32

wintrust

wininet

shlwapi

version

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

Sections

.text Size: 390KB - Virtual size: 1.8MB

.rsrc Size: 64KB - Virtual size: 64KB

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

04:1c:df:b7:c1:3c:e5:4b:19:3d:a9:f6:49:1d:eb:a1
Certificate

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

40:1a:c4:64:21:b3:13:21:03:0e:bb:e4:12:1a:c5:1d
Certificate

7f:aa:d4:d3:ff:7b:07:fb:e9:fd:c3:b7:07:fb:79:2c
Certificate

ea:c7:40:f2:a3:ac:73:7d:79:ab:a9:01:d4:c9:83:93:ea:c5:6c:60:06:d3:1b:57:8a:d7:07:56:8d:c2:77:0d
Signer

53:72:da:e9:6f:36:47:98:f0:a8:8c:50:23:d1:7f:b2:4e:20:0c:bf
Signer

.text
Size: 390KB - Virtual size: 1.8MB

.rsrc
Size: 64KB - Virtual size: 64KB