37403997ff2d9c690f5e67b76a211abb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

37403997ff2d9c690f5e67b76a211abb_JaffaCakes118
Size

47KB
MD5

37403997ff2d9c690f5e67b76a211abb
SHA1

77d62ccec3da41b97572d02910bee3bd9f4ab9a7
SHA256

a554366978d9ec0a0d63ebcecd945eb8a4b852a3ce3286346527c00fc691eb0d
SHA512

1718ababb2ea2480647f1fcaa4606e2acfdf61870aaf9da9debc1a2fcf9a216ca4909ee8cb599b15128576ac5ac979aab622ab2379ec8ea5e8ef90b96f6b73ae
SSDEEP

768:8FAyLBZVZpHG2v4nQTzidnOlRVUSMKAjFtCvZkMiRtrOiRtQWFFK:YhVZpsnQ1DUvKHMrOM9K

Score

1^/10

Malware Config

Signatures

Files

37403997ff2d9c690f5e67b76a211abb_JaffaCakes118
.exe windows:5 windows x64 arch:x64

afde06f70eb61e4b61005e737ab36fb0

Code Sign

07
Certificate

Issuer

CN=Starfield Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:e6:3a:c9:92:ef:67:ba
Certificate

Issuer

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

09/09/2020, 07:00

Not After

09/09/2025, 07:00

Subject

CN=Starfield Timestamp Authority - G2,O=Starfield Technologies\, LLC,L=Scottsdale,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/12/2014, 00:00

Not After

02/12/2029, 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6d
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

28/08/2020, 00:00

Not After

28/08/2021, 23:59

Subject

SERIALNUMBER=91440400MA51NE7R6U,CN=珠海源泽咨询有限公司,O=珠海源泽咨询有限公司,POSTALCODE=519031,STREET=横琴新区宝华路6号105室-48741(集中办公区),L=珠海市,ST=Guangdong Sheng,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:18:54:86:00:00:00:00:00:24
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/04/2011, 22:06

Not After

11/04/2021, 22:16

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/12/2014, 00:00

Not After

02/12/2029, 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6d
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

28/08/2020, 00:00

Not After

28/08/2021, 23:59

Subject

SERIALNUMBER=91440400MA51NE7R6U,CN=珠海源泽咨询有限公司,O=珠海源泽咨询有限公司,POSTALCODE=519031,STREET=横琴新区宝华路6号105室-48741(集中办公区),L=珠海市,ST=Guangdong Sheng,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:18:54:86:00:00:00:00:00:24
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/04/2011, 22:06

Not After

11/04/2021, 22:16

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07
Certificate

Issuer

CN=Starfield Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:e6:3a:c9:92:ef:67:ba
Certificate

Issuer

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

09/09/2020, 07:00

Not After

09/09/2025, 07:00

Subject

CN=Starfield Timestamp Authority - G2,O=Starfield Technologies\, LLC,L=Scottsdale,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d0:77:df:73:ce:a6:9a:7b:bc:bd:fc:31:43:82:a9:c0:e2:49:5a:33:91:0b:fd:39:36:a4:c3:e3:74:6b:7e:97
Signer

Actual PE Digest

d0:77:df:73:ce:a6:9a:7b:bc:bd:fc:31:43:82:a9:c0:e2:49:5a:33:91:0b:fd:39:36:a4:c3:e3:74:6b:7e:97

Digest Algorithm

sha256

PE Digest Matches

false

aa:26:2d:db:f8:9d:b3:9d:f5:6e:94:be:e0:80:33:dc:81:a4:b9:74
Signer

Actual PE Digest

aa:26:2d:db:f8:9d:b3:9d:f5:6e:94:be:e0:80:33:dc:81:a4:b9:74

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetProcAddress
GetTickCount
LoadLibraryW

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

afde06f70eb61e4b61005e737ab36fb0

Code Sign

07Certificate

Key Usages

0b:e6:3a:c9:92:ef:67:baCertificate

Extended Key Usages

Key Usages

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1Certificate

Extended Key Usages

Key Usages

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6dCertificate

Extended Key Usages

Key Usages

61:18:54:86:00:00:00:00:00:24Certificate

Key Usages

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1Certificate

Extended Key Usages

Key Usages

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6dCertificate

Extended Key Usages

Key Usages

61:18:54:86:00:00:00:00:00:24Certificate

Key Usages

07Certificate

Key Usages

0b:e6:3a:c9:92:ef:67:baCertificate

Extended Key Usages

Key Usages

d0:77:df:73:ce:a6:9a:7b:bc:bd:fc:31:43:82:a9:c0:e2:49:5a:33:91:0b:fd:39:36:a4:c3:e3:74:6b:7e:97Signer

aa:26:2d:db:f8:9d:b3:9d:f5:6e:94:be:e0:80:33:dc:81:a4:b9:74Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: - Virtual size: 536B

.pdata Size: 512B - Virtual size: 168B

.rsrc Size: 512B - Virtual size: 488B

07
Certificate

0b:e6:3a:c9:92:ef:67:ba
Certificate

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6d
Certificate

61:18:54:86:00:00:00:00:00:24
Certificate

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6d
Certificate

61:18:54:86:00:00:00:00:00:24
Certificate

07
Certificate

0b:e6:3a:c9:92:ef:67:ba
Certificate

d0:77:df:73:ce:a6:9a:7b:bc:bd:fc:31:43:82:a9:c0:e2:49:5a:33:91:0b:fd:39:36:a4:c3:e3:74:6b:7e:97
Signer

aa:26:2d:db:f8:9d:b3:9d:f5:6e:94:be:e0:80:33:dc:81:a4:b9:74
Signer

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: - Virtual size: 536B

.pdata
Size: 512B - Virtual size: 168B

.rsrc
Size: 512B - Virtual size: 488B