6fd6030e6f6522dcf75792f349087157_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6fd6030e6f6522dcf75792f349087157_JaffaCakes118
Size

5.9MB
MD5

6fd6030e6f6522dcf75792f349087157
SHA1

1ffcfa388616b5745cd025bdaffb7ef60e570b42
SHA256

c1ed17d887ae7d2940f3cbdd05ad1e0ef3c94036f72087c00bc5778699da947c
SHA512

f87623a2fdc142dcd84150d4553dff68eba3b868ee1da669ff9d1a72f5334081142f90e0f0060589fba92c220bea5d9a72de5244ae7a128c2b01b96fd530912f
SSDEEP

98304:nE8H8rjh88mbmIklyX+9YIk1QnRTsL7Ha7aUUOagGkU2MHZt5s2:78J88mbmIklyu9YIk1Ig7HZgKkUHZDz

Score

1^/10

Malware Config

Signatures

Files

6fd6030e6f6522dcf75792f349087157_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

59:92:4f:88:c8:67:0e:86:42:dd:04:df:b0:e9:3c:a9
Certificate

Issuer

CN=Steven Bajo Jr,1.2.840.113549.1.9.1=#0c0e7362616a6f406c6976652e636f6d

Not Before

10/02/2021, 00:24

Not After

10/11/2023, 00:34

Subject

CN=Steven Bajo Jr,1.2.840.113549.1.9.1=#0c0e7362616a6f406c6976652e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

31:5b:b8:7e:ed:bb:a0:2a:b7:82:28:c4:c3:e1:b7:47:75:ae:14:71:3f:bb:12:84:6b:6a:a3:2a:c1:4d:e1:d6
Signer

Actual PE Digest

31:5b:b8:7e:ed:bb:a0:2a:b7:82:28:c4:c3:e1:b7:47:75:ae:14:71:3f:bb:12:84:6b:6a:a3:2a:c1:4d:e1:d6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\CABAL\CDT-AWAKENED-RESOURCES\LAUNCHER\CDT Launcher v2021\update\obj\Release\update.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

59:92:4f:88:c8:67:0e:86:42:dd:04:df:b0:e9:3c:a9Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

31:5b:b8:7e:ed:bb:a0:2a:b7:82:28:c4:c3:e1:b7:47:75:ae:14:71:3f:bb:12:84:6b:6a:a3:2a:c1:4d:e1:d6Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 5.9MB - Virtual size: 5.9MB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 512B - Virtual size: 12B

59:92:4f:88:c8:67:0e:86:42:dd:04:df:b0:e9:3c:a9
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

31:5b:b8:7e:ed:bb:a0:2a:b7:82:28:c4:c3:e1:b7:47:75:ae:14:71:3f:bb:12:84:6b:6a:a3:2a:c1:4d:e1:d6
Signer

.text
Size: 5.9MB - Virtual size: 5.9MB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 512B - Virtual size: 12B