b73a72875194c147a9a3996c1b5faf9e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b73a72875194c147a9a3996c1b5faf9e_JaffaCakes118
Size

11KB
MD5

b73a72875194c147a9a3996c1b5faf9e
SHA1

34759f3ce1f95d58a6057a492a96b2f688a5566c
SHA256

63c1071477c3a738a37033aed209f41ce73185e89cc7d186e7cf3e8eaad1c312
SHA512

29faab308ccb45f0b57b0e6ff88b220b2888e9b47bfc41680d9d61c43c97bc7282765b5fe3f6fb4780979db65053b654523130b0fc27709fca804d3aef950fc1
SSDEEP

192:7P9lQR2VvehappHCZKTyGZW1W5aJujcUktocIcUf6QryaMfiedG6LfD5GEBDkgj:hKR0poZS46aJRUkt9/Uf6Qrrl0fdGmDN

Score

1^/10

Malware Config

Signatures

Files

b73a72875194c147a9a3996c1b5faf9e_JaffaCakes118
.7z
msoresandroid.dll
.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:00:8a:57:ea:89:a3:49:eb:8b:e8:00:00:00:00:00:8a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/10/2015, 18:14

Not After

07/01/2017, 18:14

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B1B7-F67F-FEC2,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:1a:c9:40:14:bc:22:2d:4a:25:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Testing Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/02/2014, 18:02

Not After

04/02/2018, 18:02

Subject

CN=MSIT Test CodeSign CA 3,0.9.2342.19200300.100.1.25=#13077265646d6f6e64,0.9.2342.19200300.100.1.25=#1304636f7270,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:67:42:ee:00:01:02:1e:40:cc
Certificate

Issuer

CN=MSIT Test CodeSign CA 3,0.9.2342.19200300.100.1.25=#13077265646d6f6e64,0.9.2342.19200300.100.1.25=#1304636f7270,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

07/05/2014, 17:47

Not After

06/05/2016, 17:47

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9a:19:01:7e:34:7e:f4:53:b1:e1:bf:de:5e:40:a8:66:3a:b9:48:55:6f:97:12:de:0c:22:37:9e:c0:45:42:6a
Signer

Actual PE Digest

9a:19:01:7e:34:7e:f4:53:b1:e1:bf:de:5e:40:a8:66:3a:b9:48:55:6f:97:12:de:0c:22:37:9e:c0:45:42:6a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:00:8a:57:ea:89:a3:49:eb:8b:e8:00:00:00:00:00:8aCertificate

Extended Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

33:00:00:00:1a:c9:40:14:bc:22:2d:4a:25:00:00:00:00:00:1aCertificate

Key Usages

5f:67:42:ee:00:01:02:1e:40:ccCertificate

Extended Key Usages

Key Usages

9a:19:01:7e:34:7e:f4:53:b1:e1:bf:de:5e:40:a8:66:3a:b9:48:55:6f:97:12:de:0c:22:37:9e:c0:45:42:6aSigner

Headers

DLL Characteristics

File Characteristics

Sections

.rdata Size: 512B - Virtual size: 112B

.rsrc Size: 23KB - Virtual size: 23KB

33:00:00:00:8a:57:ea:89:a3:49:eb:8b:e8:00:00:00:00:00:8a
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:00:1a:c9:40:14:bc:22:2d:4a:25:00:00:00:00:00:1a
Certificate

5f:67:42:ee:00:01:02:1e:40:cc
Certificate

9a:19:01:7e:34:7e:f4:53:b1:e1:bf:de:5e:40:a8:66:3a:b9:48:55:6f:97:12:de:0c:22:37:9e:c0:45:42:6a
Signer

.rdata
Size: 512B - Virtual size: 112B

.rsrc
Size: 23KB - Virtual size: 23KB