3412fad3922cbead394fecc7f780c7b8_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

3412fad3922cbead394fecc7f780c7b8_JaffaCakes118
Size

46KB
MD5

3412fad3922cbead394fecc7f780c7b8
SHA1

7fe462fb0f20c07f850946e54829a459e81c6905
SHA256

8d7d5b7eb58e9803abbd4b8428afb3aa7886e6b9402831a585d1e412535ecad3
SHA512

fd1a0e9110b982b45eed0cbef4a4c3566239c8609dd7d7afb68b8f98f90f83ebfd30fb7957f02fd938ec17e33f01841956cc477af21c649d6e979fda66682195
SSDEEP

768:8FAyLBZVZpHG2v4nQTzidnOlRVUSMKAjFtCvZkMiRtrOiRtQWFu:YhVZpsnQ1DUvKHMrOMW

Score

1^/10

Malware Config

Signatures

Files

3412fad3922cbead394fecc7f780c7b8_JaffaCakes118
.exe windows:5 windows x64 arch:x64

afde06f70eb61e4b61005e737ab36fb0

Code Sign

07
Certificate

Issuer

CN=Starfield Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03-05-2011 07:00

Not After

03-05-2031 07:00

Subject

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:e6:3a:c9:92:ef:67:ba
Certificate

Issuer

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

09-09-2020 07:00

Not After

09-09-2025 07:00

Subject

CN=Starfield Timestamp Authority - G2,O=Starfield Technologies\, LLC,L=Scottsdale,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-12-2014 00:00

Not After

02-12-2029 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6d
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

28-08-2020 00:00

Not After

28-08-2021 23:59

Subject

SERIALNUMBER=91440400MA51NE7R6U,CN=珠海源泽咨询有限公司,O=珠海源泽咨询有限公司,POSTALCODE=519031,STREET=横琴新区宝华路6号105室-48741(集中办公区),L=珠海市,ST=Guangdong Sheng,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:18:54:86:00:00:00:00:00:24
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-04-2011 22:06

Not After

11-04-2021 22:16

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-12-2014 00:00

Not After

02-12-2029 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6d
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

28-08-2020 00:00

Not After

28-08-2021 23:59

Subject

SERIALNUMBER=91440400MA51NE7R6U,CN=珠海源泽咨询有限公司,O=珠海源泽咨询有限公司,POSTALCODE=519031,STREET=横琴新区宝华路6号105室-48741(集中办公区),L=珠海市,ST=Guangdong Sheng,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:18:54:86:00:00:00:00:00:24
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-04-2011 22:06

Not After

11-04-2021 22:16

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07
Certificate

Issuer

CN=Starfield Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03-05-2011 07:00

Not After

03-05-2031 07:00

Subject

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:e6:3a:c9:92:ef:67:ba
Certificate

Issuer

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

09-09-2020 07:00

Not After

09-09-2025 07:00

Subject

CN=Starfield Timestamp Authority - G2,O=Starfield Technologies\, LLC,L=Scottsdale,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

31:a9:7b:3c:ce:fd:0b:d2:a7:a0:5c:0a:5e:7e:42:2b:4c:67:11:e4:e5:43:61:5d:06:ae:56:ae:0a:83:49:35
Signer

Actual PE Digest

31:a9:7b:3c:ce:fd:0b:d2:a7:a0:5c:0a:5e:7e:42:2b:4c:67:11:e4:e5:43:61:5d:06:ae:56:ae:0a:83:49:35

Digest Algorithm

sha256

PE Digest Matches

false

50:f0:77:f5:bd:aa:ed:21:42:22:97:9d:cb:0e:e9:6c:58:0d:cb:ae
Signer

Actual PE Digest

50:f0:77:f5:bd:aa:ed:21:42:22:97:9d:cb:0e:e9:6c:58:0d:cb:ae

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetProcAddress
GetTickCount
LoadLibraryW

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

afde06f70eb61e4b61005e737ab36fb0

Code Sign

07Certificate

Key Usages

0b:e6:3a:c9:92:ef:67:baCertificate

Extended Key Usages

Key Usages

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1Certificate

Extended Key Usages

Key Usages

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6dCertificate

Extended Key Usages

Key Usages

61:18:54:86:00:00:00:00:00:24Certificate

Key Usages

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1Certificate

Extended Key Usages

Key Usages

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6dCertificate

Extended Key Usages

Key Usages

61:18:54:86:00:00:00:00:00:24Certificate

Key Usages

07Certificate

Key Usages

0b:e6:3a:c9:92:ef:67:baCertificate

Extended Key Usages

Key Usages

31:a9:7b:3c:ce:fd:0b:d2:a7:a0:5c:0a:5e:7e:42:2b:4c:67:11:e4:e5:43:61:5d:06:ae:56:ae:0a:83:49:35Signer

50:f0:77:f5:bd:aa:ed:21:42:22:97:9d:cb:0e:e9:6c:58:0d:cb:aeSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: - Virtual size: 536B

.pdata Size: 512B - Virtual size: 168B

.rsrc Size: 512B - Virtual size: 488B

07
Certificate

0b:e6:3a:c9:92:ef:67:ba
Certificate

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6d
Certificate

61:18:54:86:00:00:00:00:00:24
Certificate

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6d
Certificate

61:18:54:86:00:00:00:00:00:24
Certificate

07
Certificate

0b:e6:3a:c9:92:ef:67:ba
Certificate

31:a9:7b:3c:ce:fd:0b:d2:a7:a0:5c:0a:5e:7e:42:2b:4c:67:11:e4:e5:43:61:5d:06:ae:56:ae:0a:83:49:35
Signer

50:f0:77:f5:bd:aa:ed:21:42:22:97:9d:cb:0e:e9:6c:58:0d:cb:ae
Signer

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: - Virtual size: 536B

.pdata
Size: 512B - Virtual size: 168B

.rsrc
Size: 512B - Virtual size: 488B