4a143d9346c2007a7509e268c4515c20_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

4a143d9346c2007a7509e268c4515c20_JaffaCakes118
Size

1.6MB
MD5

4a143d9346c2007a7509e268c4515c20
SHA1

fada525531cb4b8103b4c06f3b92600d49efacbe
SHA256

3e0c349968c0ae605f75459384c57c4b24b9479dad151e53ffff19270082ab4c
SHA512

b9ef42980aee6a506cc7d064d9fec3d334d64c648898c8829e60fc7b711e71bf64e857308ccf7da751c75901f946f2ee70477f0774657e348bead82eb659dae5
SSDEEP

24576:UzWTlkc0IFc6WTkJjCLliDezR35/wTvt/UxTeeqo+nw9OJ4ZtjQf1Xtula8Mjf2P:HTqx6+oJjwla83//Jq8wQ81duxr

Score

1^/10

Malware Config

Signatures

Files

4a143d9346c2007a7509e268c4515c20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

43:66:54:9e:e1:a5:e9:49:b8:f8:92:e4:e1:f7:6c:d2
Certificate

Issuer

CN=NCLauncher

Not Before

04/06/2020, 05:23

Not After

31/12/2039, 23:59

Subject

CN=NCLauncher

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d1:83:a9:fc:3f:ca:38:f5:bb:51:74:57:c1:79:2f:2b:60:ce:e6:32
Signer

Actual PE Digest

d1:83:a9:fc:3f:ca:38:f5:bb:51:74:57:c1:79:2f:2b:60:ce:e6:32

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\Downloads\linall접속기소스0215로마\RETURN\bin\Release\CryptoObfuscator_Output\런처.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

43:66:54:9e:e1:a5:e9:49:b8:f8:92:e4:e1:f7:6c:d2Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

d1:83:a9:fc:3f:ca:38:f5:bb:51:74:57:c1:79:2f:2b:60:ce:e6:32Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.reloc Size: 512B - Virtual size: 12B

.rsrc Size: 21KB - Virtual size: 20KB

43:66:54:9e:e1:a5:e9:49:b8:f8:92:e4:e1:f7:6c:d2
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

d1:83:a9:fc:3f:ca:38:f5:bb:51:74:57:c1:79:2f:2b:60:ce:e6:32
Signer

.text
Size: 1.5MB - Virtual size: 1.5MB

.reloc
Size: 512B - Virtual size: 12B

.rsrc
Size: 21KB - Virtual size: 20KB