34ab7e87c9452c6edbe53f1192ce2ee6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

34ab7e87c9452c6edbe53f1192ce2ee6_JaffaCakes118
Size

128KB
MD5

34ab7e87c9452c6edbe53f1192ce2ee6
SHA1

ef211e0b5d17f1c52dd6e0b03ae1bf605a758529
SHA256

8d5c8c8b85a6c35986db6799ad0c5c1969c96d44ac0d6dd7d5aaff9c63e39a83
SHA512

50575ab54d5f9e164d00bbe0349e25c8435242356c12b92b9527139c81deb28c8a32e97f66a2f23bf6aa969e7a1831b8868ee75f76f1081f43ce43f26a77fe7d
SSDEEP

1536:w4Yv7vwIGQ6XzFf0zpU2KqOWKFU6FPZV0K/3HkvRlnkU/DsNuBA/BhnLNfGCDcyw:4eQ6XzMGcKFTtSAPNb/znpVcyBKHR

Score

1^/10

Malware Config

Signatures

Files

34ab7e87c9452c6edbe53f1192ce2ee6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Code Sign

1b:92:1c:54:66:b6:22:82:4b:3c:42:fa:b2:b0:e8:85
Certificate

Issuer

CN=VirSCAN.org

Not Before

25/07/2011, 19:45

Not After

31/12/2039, 23:59

Subject

CN=virscan.org Corporation Root CA,OU=CA Center,O=计算机网络与信息安全技术研究中心+O=virscan.org Corporation,1.2.840.113549.1.9.1=#0c107363616e407669727363616e2e6f7267

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

30/04/2007, 00:00

Not After

29/04/2012, 23:59

Subject

CN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

ea:72:9a:09:d2:b6:f5:cf:de:93:cf:36:48:b2:99:e0:6a:7d:b1:31
Signer

Actual PE Digest

ea:72:9a:09:d2:b6:f5:cf:de:93:cf:36:48:b2:99:e0:6a:7d:b1:31

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

1b:92:1c:54:66:b6:22:82:4b:3c:42:fa:b2:b0:e8:85Certificate

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate

Extended Key Usages

Key Usages

ea:72:9a:09:d2:b6:f5:cf:de:93:cf:36:48:b2:99:e0:6a:7d:b1:31Signer

Headers

File Characteristics

Sections

CODE Size: 3KB - Virtual size: 2KB

DATA Size: 512B - Virtual size: 96B

BSS Size: - Virtual size: 1KB

.idata Size: 512B - Virtual size: 74B

.reloc Size: 512B - Virtual size: 184B

.rsrc Size: 120KB - Virtual size: 120KB

1b:92:1c:54:66:b6:22:82:4b:3c:42:fa:b2:b0:e8:85
Certificate

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

ea:72:9a:09:d2:b6:f5:cf:de:93:cf:36:48:b2:99:e0:6a:7d:b1:31
Signer

CODE
Size: 3KB - Virtual size: 2KB

DATA
Size: 512B - Virtual size: 96B

BSS
Size: - Virtual size: 1KB

.idata
Size: 512B - Virtual size: 74B

.reloc
Size: 512B - Virtual size: 184B

.rsrc
Size: 120KB - Virtual size: 120KB