39cacfb03c3d02e827ca174ca328217f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

39cacfb03c3d02e827ca174ca328217f_JaffaCakes118
Size

2.2MB
MD5

39cacfb03c3d02e827ca174ca328217f
SHA1

d939612943d44fbe35ca2ef65acb6c9229ffc745
SHA256

0c177b740c1ab36794a5e3801159aec76c97c8a913633c63d28a5e3c760c0e2a
SHA512

1b6446794e048874e025dbc92a45b2e74c0c73cda5d2740ba0cea5f6e632266606fc4f57785a57efa7e7172ab1d13cb8fe9e8c28b9ed77616e60c203fbf92288
SSDEEP

49152:0GUhhwlpgpTHsoOj6u3k9J6kMVAYgHE5WsSKSZZn8734Ax7p9QoAZBAvBnyO3N:pUDMpgpQRj6Mk9kkKAm59SJeky9QoGAd

Score

1^/10

Malware Config

Signatures

Files

39cacfb03c3d02e827ca174ca328217f_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Code Sign

02:2f:0d
Certificate

Issuer

CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL

Not Before

28/08/2002, 17:05

Not After

28/08/2012, 17:05

Subject

CN=Certum Time-Stamping Authority,O=Unizeto Sp. z o.o.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

01:00:00:00:00:01:10:a1:56:75:3b
Certificate

Issuer

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Not Before

08/02/2007, 12:31

Not After

08/02/2008, 12:31

Subject

CN=Eltima Software,O=Eltima Software,C=DE,1.2.840.113549.1.9.1=#0c1073616c657340656c74696d612e636f6d

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageKeyEncipherment
KeyUsageDataEncipherment

04:00:00:00:00:01:08:d9:61:1c:d6
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

28/01/1999, 12:00

Not After

27/01/2014, 11:00

Subject

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:08:d9:61:24:48
Certificate

Issuer

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Not Before

22/01/2004, 09:00

Not After

27/01/2014, 10:00

Subject

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

af:c4:ad:34:3c:a2:59:08:bb:9e:88:84:14:e6:76:c3:eb:78:18:78
Signer

Actual PE Digest

af:c4:ad:34:3c:a2:59:08:bb:9e:88:84:14:e6:76:c3:eb:78:18:78

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

02:2f:0dCertificate

Extended Key Usages

01:00:00:00:00:01:10:a1:56:75:3bCertificate

Key Usages

04:00:00:00:00:01:08:d9:61:1c:d6Certificate

Key Usages

04:00:00:00:00:01:08:d9:61:24:48Certificate

Key Usages

af:c4:ad:34:3c:a2:59:08:bb:9e:88:84:14:e6:76:c3:eb:78:18:78Signer

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 36KB - Virtual size: 35KB

DATA Size: 1024B - Virtual size: 584B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 10KB - Virtual size: 10KB

02:2f:0d
Certificate

01:00:00:00:00:01:10:a1:56:75:3b
Certificate

04:00:00:00:00:01:08:d9:61:1c:d6
Certificate

04:00:00:00:00:01:08:d9:61:24:48
Certificate

af:c4:ad:34:3c:a2:59:08:bb:9e:88:84:14:e6:76:c3:eb:78:18:78
Signer

CODE
Size: 36KB - Virtual size: 35KB

DATA
Size: 1024B - Virtual size: 584B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 10KB - Virtual size: 10KB