15f66a7abf468b29e360c01d3541274a_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

15f66a7abf468b29e360c01d3541274a_JaffaCakes118
Size

1005KB
MD5

15f66a7abf468b29e360c01d3541274a
SHA1

fb769dbcb9a977772d392956c8153121ac43f39a
SHA256

3b457e07377c517efa8f09335180d58d61a9eef08fb0d0bbc2bf9a3ad4739ede
SHA512

073dc3abfb5bae07578c61d4094bd4cc08dede4c24da04cb648b90d803d6fbe7f60232112ef24fbcd31dfaf35a3b554e4877d72405046f8c1923d6f0c91e2530
SSDEEP

24576:/ORwmlLqjy715iWugP1o9XD8PGWywe5d+YbI+Yw/aCDmMTvxRwzqDTudbMbHi4xY:/ORwmlLqjy715iWugP1o9T8P+rjbI+Yw

Score

1^/10

Malware Config

Signatures

Files

15f66a7abf468b29e360c01d3541274a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Code Sign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24-08-2011 00:00

Not After

30-05-2020 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a2:43:e4:9c:0d:af:69:f7:c5:ac:f0:83:eb:18:41:61
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19-04-2012 00:00

Not After

19-04-2013 23:59

Subject

CN=Click run software,O=Click run software,POSTALCODE=65785,STREET=63 Rotshylid Shderot,L=Tel-Aviv,ST=NA,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:84:97:31:45:f1:2d:9a:f7:e9:65:98:85:4e:b0:69:d7:68:55:e8
Signer

Actual PE Digest

61:84:97:31:45:f1:2d:9a:f7:e9:65:98:85:4e:b0:69:d7:68:55:e8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 787KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bbCertificate

Extended Key Usages

Key Usages

a2:43:e4:9c:0d:af:69:f7:c5:ac:f0:83:eb:18:41:61Certificate

Extended Key Usages

Key Usages

61:84:97:31:45:f1:2d:9a:f7:e9:65:98:85:4e:b0:69:d7:68:55:e8Signer

Headers

File Characteristics

Sections

CODE Size: 787KB - Virtual size: 786KB

DATA Size: 20KB - Virtual size: 20KB

BSS Size: - Virtual size: 15KB

.idata Size: 12KB - Virtual size: 12KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 44KB - Virtual size: 44KB

.rsrc Size: 136KB - Virtual size: 136KB

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

a2:43:e4:9c:0d:af:69:f7:c5:ac:f0:83:eb:18:41:61
Certificate

61:84:97:31:45:f1:2d:9a:f7:e9:65:98:85:4e:b0:69:d7:68:55:e8
Signer

CODE
Size: 787KB - Virtual size: 786KB

DATA
Size: 20KB - Virtual size: 20KB

BSS
Size: - Virtual size: 15KB

.idata
Size: 12KB - Virtual size: 12KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 44KB - Virtual size: 44KB

.rsrc
Size: 136KB - Virtual size: 136KB