3b123be835e05916f1857e909f5bc7d6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3b123be835e05916f1857e909f5bc7d6_JaffaCakes118
Size

422KB
MD5

3b123be835e05916f1857e909f5bc7d6
SHA1

6b682bc188f9772973235ad6b3184d08b59c0435
SHA256

cf7c1a1ab7dbc641835c11c424300014fe52f381265696567b4c55fecd07b28d
SHA512

f336fbe86df477acf53c671830d0544bac926813505dcb81af6907a7a1f52717f87c0ae7db7e12b227c4c3181b9bb125583731e8a5abdbf7cccae6858d5cfe96
SSDEEP

6144:QGtX48wdxpjyVDNoBgOKR+L1ZjF/rr7tfQN5/inEaMadDKNa1aIOS:Q4IDuVkG+L7F/7tfQunka1KNaTr

Score

1^/10

Malware Config

Signatures

Files

3b123be835e05916f1857e909f5bc7d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:9d:aa:11:d3:30:a8:95:60:ac:fa
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

01/07/1999, 07:00

Not After

15/10/2005, 07:00

Subject

CN=Microsoft Windows Verification Intermediate PCA,OU=Copyright (c) 1999 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:0e:15:93:00:00:00:00:00:3c
Certificate

Issuer

CN=Microsoft Windows Verification Intermediate PCA,OU=Copyright (c) 1999 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Not Before

13/05/2004, 21:32

Not After

13/07/2005, 21:42

Subject

CN=Microsoft Windows XP Publisher,OU=Copyright (c) 2004 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

71:f0:a2:13:56:f6:fb:06:e0:5f:f1:b4:3d:64:dd:7a:1e:b1:56:19
Signer

Actual PE Digest

71:f0:a2:13:56:f6:fb:06:e0:5f:f1:b4:3d:64:dd:7a:1e:b1:56:19

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 280KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 126KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate

Extended Key Usages

Key Usages

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

6a:0b:99:4f:c0:00:9d:aa:11:d3:30:a8:95:60:ac:faCertificate

Extended Key Usages

Key Usages

61:0e:15:93:00:00:00:00:00:3cCertificate

Extended Key Usages

Key Usages

71:f0:a2:13:56:f6:fb:06:e0:5f:f1:b4:3d:64:dd:7a:1e:b1:56:19Signer

Headers

File Characteristics

Sections

Size: - Virtual size: 1.0MB

Size: 280KB - Virtual size: 284KB

Size: 8KB - Virtual size: 12KB

.data Size: 126KB - Virtual size: 128KB

.adata Size: - Virtual size: 4KB

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

6a:0b:99:4f:c0:00:9d:aa:11:d3:30:a8:95:60:ac:fa
Certificate

61:0e:15:93:00:00:00:00:00:3c
Certificate

71:f0:a2:13:56:f6:fb:06:e0:5f:f1:b4:3d:64:dd:7a:1e:b1:56:19
Signer

.data
Size: 126KB - Virtual size: 128KB

.adata
Size: - Virtual size: 4KB