2675a440ef11ad70524ad55c8ce9cfa8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2675a440ef11ad70524ad55c8ce9cfa8_JaffaCakes118
Size

6KB
MD5

2675a440ef11ad70524ad55c8ce9cfa8
SHA1

b29a8725737633af341fb2d1267193806856e573
SHA256

274308e87e51d4f2eb26ac7e9b9e498276b9ef534108c234f7eea848b5954553
SHA512

b6db67b3d8ca176a2cc32aa58945b601524d817ad6b969e165f70f69481707f6f2f1d94ce4334664a8a90b51bf2ace03fa2191f73756b668ae47b528f3da361f
SSDEEP

96:irRJUI9WaoKHbifz6dz6yncevz6vuegOwWHSwOGgxefjhA:wJUI9WaoKHbzEyncjWO9SwOGgxUA

Score

1^/10

Malware Config

Signatures

Files

2675a440ef11ad70524ad55c8ce9cfa8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

226a51b04de36c110b7a97b8e5957ccd

Code Sign

01
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

01/08/1996, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

0a
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

06/08/2003, 00:00

Not After

05/08/2013, 23:59

Subject

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

21:11:4a
Certificate

Issuer

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Not Before

14/04/2005, 09:06

Not After

14/04/2007, 09:06

Subject

CN=Yes Limited,OU=software,O=Yes Limited,L=London,ST=London,C=UK

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

04:8c:c8:2e:02:38:24:a6:8d:a3:6c:68:bd:b7:6a:f7:04:1c:a6:3f
Signer

Actual PE Digest

04:8c:c8:2e:02:38:24:a6:8d:a3:6c:68:bd:b7:6a:f7:04:1c:a6:3f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostMessageA
FindWindowA

kernel32

GetModuleHandleA
ExitProcess

Sections

.text
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

226a51b04de36c110b7a97b8e5957ccd

Code Sign

01Certificate

0aCertificate

Extended Key Usages

Key Usages

21:11:4aCertificate

Extended Key Usages

04:8c:c8:2e:02:38:24:a6:8d:a3:6c:68:bd:b7:6a:f7:04:1c:a6:3fSigner

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 1024B - Virtual size: 532B

.rdata Size: 512B - Virtual size: 198B

.data Size: 1024B - Virtual size: 1KB

01
Certificate

0a
Certificate

21:11:4a
Certificate

04:8c:c8:2e:02:38:24:a6:8d:a3:6c:68:bd:b7:6a:f7:04:1c:a6:3f
Signer

.text
Size: 1024B - Virtual size: 532B

.rdata
Size: 512B - Virtual size: 198B

.data
Size: 1024B - Virtual size: 1KB