0c48f8bfe0a6805043bd84261e8534bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c48f8bfe0a6805043bd84261e8534bb_JaffaCakes118
Size

46KB
MD5

0c48f8bfe0a6805043bd84261e8534bb
SHA1

5950fde637c4d13c108095728f0c1c59c092dc1e
SHA256

d6e83c18dd780fc4bcd8f19ffc6c4bc41cc57f9719a746f34725dd70648aa702
SHA512

b54b396b38f7e044f60a45a1b5999f861b0b46e92497df1af59376d6f0e2d61c1fddd64a3d8ee236be82685ccfe121a159ba359e67da46705e64b7906b4e681e
SSDEEP

768:bP+a9OF1qnLzkdqcBJTx6iPN7MUQPuQtGFRine6GyLU0zL7gAcm2Rl3/+w2096Nw:KaGqnCDB+JdtGFRihPISLvcm2R5n20sK

Score

1^/10

Malware Config

Signatures

Files

0c48f8bfe0a6805043bd84261e8534bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Code Sign

86:c5:a6:45:2b:b0:f6:40:a1:1c:f2:a7:26:2e:92:10
Certificate

Issuer

CN=Logitech,OU=\ ,L=Utah,C=US,1.2.840.113549.1.9.1=#0c1061646d406c6f6769746563682e636f6d

Not Before

01/09/2010, 00:00

Not After

31/08/2011, 23:59

Subject

CN=Logitech,OU=\ ,L=Utah,C=US,1.2.840.113549.1.9.1=#0c1061646d406c6f6769746563682e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ