3b935b748c7b2cb235e409ba8c0b8500_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3b935b748c7b2cb235e409ba8c0b8500_JaffaCakes118
Size

46KB
MD5

3b935b748c7b2cb235e409ba8c0b8500
SHA1

fa6e8b562b7451a0d0473a4ed1440d55457e0e32
SHA256

2be1e8a82866b9876854155e6fc48b0fce78e96026606e39d75c16df1566518c
SHA512

0a43214ffd305d5a4afa66746b197fb35b0b416e33878e4ab356da36f790f5ebefb3a0fe586f450ffc7e8d0362a8a0c08fcb319f458267d1cfe1437022bf4b72
SSDEEP

768:VFAyLBZVZpHG2v4nQTzidnOlRVUSMKAjFtCJ7MiRtrQiiRt58:vhVZpsnQ1DUvKGMrDM+

Score

1^/10

Malware Config

Signatures

Files

3b935b748c7b2cb235e409ba8c0b8500_JaffaCakes118
.exe windows:5 windows x64 arch:x64

afde06f70eb61e4b61005e737ab36fb0

Code Sign

07
Certificate

Issuer

CN=Starfield Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:e6:3a:c9:92:ef:67:ba
Certificate

Issuer

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

09/09/2020, 07:00

Not After

09/09/2025, 07:00

Subject

CN=Starfield Timestamp Authority - G2,O=Starfield Technologies\, LLC,L=Scottsdale,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/12/2014, 00:00

Not After

02/12/2029, 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6d
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

28/08/2020, 00:00

Not After

28/08/2021, 23:59

Subject

SERIALNUMBER=91440400MA51NE7R6U,CN=珠海源泽咨询有限公司,O=珠海源泽咨询有限公司,POSTALCODE=519031,STREET=横琴新区宝华路6号105室-48741(集中办公区),L=珠海市,ST=Guangdong Sheng,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:18:54:86:00:00:00:00:00:24
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/04/2011, 22:06

Not After

11/04/2021, 22:16

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/12/2014, 00:00

Not After

02/12/2029, 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6d
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

28/08/2020, 00:00

Not After

28/08/2021, 23:59

Subject

SERIALNUMBER=91440400MA51NE7R6U,CN=珠海源泽咨询有限公司,O=珠海源泽咨询有限公司,POSTALCODE=519031,STREET=横琴新区宝华路6号105室-48741(集中办公区),L=珠海市,ST=Guangdong Sheng,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:18:54:86:00:00:00:00:00:24
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/04/2011, 22:06

Not After

11/04/2021, 22:16

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07
Certificate

Issuer

CN=Starfield Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:e6:3a:c9:92:ef:67:ba
Certificate

Issuer

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

09/09/2020, 07:00

Not After

09/09/2025, 07:00

Subject

CN=Starfield Timestamp Authority - G2,O=Starfield Technologies\, LLC,L=Scottsdale,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

86:9f:8b:bb:68:2c:54:68:78:b4:cd:04:e9:01:b2:3d:78:d6:fd:79:d3:73:f4:84:fc:be:47:cd:b8:a0:4c:a9
Signer

Actual PE Digest

86:9f:8b:bb:68:2c:54:68:78:b4:cd:04:e9:01:b2:3d:78:d6:fd:79:d3:73:f4:84:fc:be:47:cd:b8:a0:4c:a9

Digest Algorithm

sha256

PE Digest Matches

false

9b:96:25:d0:f8:4d:7c:65:a1:a8:fc:58:16:73:62:31:48:39:22:bc
Signer

Actual PE Digest

9b:96:25:d0:f8:4d:7c:65:a1:a8:fc:58:16:73:62:31:48:39:22:bc

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetProcAddress
GetTickCount
LoadLibraryW

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

afde06f70eb61e4b61005e737ab36fb0

Code Sign

07Certificate

Key Usages

0b:e6:3a:c9:92:ef:67:baCertificate

Extended Key Usages

Key Usages

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1Certificate

Extended Key Usages

Key Usages

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6dCertificate

Extended Key Usages

Key Usages

61:18:54:86:00:00:00:00:00:24Certificate

Key Usages

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1Certificate

Extended Key Usages

Key Usages

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6dCertificate

Extended Key Usages

Key Usages

61:18:54:86:00:00:00:00:00:24Certificate

Key Usages

07Certificate

Key Usages

0b:e6:3a:c9:92:ef:67:baCertificate

Extended Key Usages

Key Usages

86:9f:8b:bb:68:2c:54:68:78:b4:cd:04:e9:01:b2:3d:78:d6:fd:79:d3:73:f4:84:fc:be:47:cd:b8:a0:4c:a9Signer

9b:96:25:d0:f8:4d:7c:65:a1:a8:fc:58:16:73:62:31:48:39:22:bcSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: - Virtual size: 536B

.pdata Size: 512B - Virtual size: 168B

.rsrc Size: 512B - Virtual size: 488B

07
Certificate

0b:e6:3a:c9:92:ef:67:ba
Certificate

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6d
Certificate

61:18:54:86:00:00:00:00:00:24
Certificate

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6d
Certificate

61:18:54:86:00:00:00:00:00:24
Certificate

07
Certificate

0b:e6:3a:c9:92:ef:67:ba
Certificate

86:9f:8b:bb:68:2c:54:68:78:b4:cd:04:e9:01:b2:3d:78:d6:fd:79:d3:73:f4:84:fc:be:47:cd:b8:a0:4c:a9
Signer

9b:96:25:d0:f8:4d:7c:65:a1:a8:fc:58:16:73:62:31:48:39:22:bc
Signer

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: - Virtual size: 536B

.pdata
Size: 512B - Virtual size: 168B

.rsrc
Size: 512B - Virtual size: 488B