2f9e059ceb4dd2aa1e493cc0686f6a96_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2f9e059ceb4dd2aa1e493cc0686f6a96_JaffaCakes118
Size

3.6MB
MD5

2f9e059ceb4dd2aa1e493cc0686f6a96
SHA1

d04a8b5d5483d96cded279a13f7180649720b482
SHA256

6315d502ac38bff30a4b910f88e5643b9871d8734cf2e499e0428f94ef843bd1
SHA512

4375c289b2e37e5a728f151549221ad0ef99942ef3592aad7452e2dd9ef26460bf5a24adc9962fab23633c887389c3ed15b6e1c46b8ab1bd900dca5ccc375d12
SSDEEP

98304:PL0ghayhusaEccsOkIhTtRn5+6Ys2jRTJy6+:TOVrIhpRn5+xNEp

Score

1^/10

Malware Config

Signatures

Files

2f9e059ceb4dd2aa1e493cc0686f6a96_JaffaCakes118
.rar
eesetup.exe
.exe windows:4 windows x86 arch:x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d6:77:69:ea:2e:08:21:4c:95:2c:10:a8:18:e0:c5:1f
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

08/01/2007, 00:00

Not After

07/01/2009, 23:59

Subject

CN=MetaProducts Corporation,O=MetaProducts Corporation,POSTALCODE=33682,STREET=P.O. Box 82160,L=Tampa,ST=FL,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

48:16:00:03:04:97:25:51:11:95:1e:d6:0f:e1:27:e8:2d:a4:a9:5a
Signer

Actual PE Digest

48:16:00:03:04:97:25:51:11:95:1e:d6:0f:e1:27:e8:2d:a4:a9:5a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 140KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 359KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 76KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新云软件.url
.url

Sharing

General

Malware Config

Signatures

Files

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate

Extended Key Usages

Key Usages

d6:77:69:ea:2e:08:21:4c:95:2c:10:a8:18:e0:c5:1fCertificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

48:16:00:03:04:97:25:51:11:95:1e:d6:0f:e1:27:e8:2d:a4:a9:5aSigner

Headers

File Characteristics

Sections

CODE Size: 1.5MB - Virtual size: 4.5MB

DATA Size: 140KB - Virtual size: 248KB

BSS Size: - Virtual size: 32KB

.idata Size: 5KB - Virtual size: 16KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 252KB

.rsrc Size: 359KB - Virtual size: 1.6MB

.aspack Size: 76KB - Virtual size: 80KB

.adata Size: - Virtual size: 4KB

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

d6:77:69:ea:2e:08:21:4c:95:2c:10:a8:18:e0:c5:1f
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

48:16:00:03:04:97:25:51:11:95:1e:d6:0f:e1:27:e8:2d:a4:a9:5a
Signer

CODE
Size: 1.5MB - Virtual size: 4.5MB

DATA
Size: 140KB - Virtual size: 248KB

BSS
Size: - Virtual size: 32KB

.idata
Size: 5KB - Virtual size: 16KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 252KB

.rsrc
Size: 359KB - Virtual size: 1.6MB

.aspack
Size: 76KB - Virtual size: 80KB

.adata
Size: - Virtual size: 4KB