218629c4a1eab5657a91cf9ea1076ce2_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

218629c4a1eab5657a91cf9ea1076ce2_JaffaCakes118
Size

362KB
MD5

218629c4a1eab5657a91cf9ea1076ce2
SHA1

960eeacd041dea710abf0ea985ce43edac10e0ca
SHA256

e636e864524817c9421705c33e3606c5d8b46ece43aaafe10cbb8e66bfd84558
SHA512

48995aa257f5da090c98c8d5d345304b03fc4ffa6298947243b1b42934fee82398953a1da7c6823705f3e2f36b7c39abc8eeff93b2a751bbc286455f58f534d8
SSDEEP

6144:9qm4F/+rqgvDkS1ScNX5tn9LSpEQ4sxBy2V1kAqnnYGZLfmfRPyAfDybP2FFFF4q:IeqgvDkIDR5tn9LoHLy2VN7cjmfRPyA1

Score

1^/10

Malware Config

Signatures

Files

218629c4a1eab5657a91cf9ea1076ce2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

26:63:10:d5:bf:1a:1e:4a:2f:0a:4f:45:80:98:d9:31:77:7c:12:c4
Certificate

Issuer

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Not Before

27-09-2020 09:28

Not After

27-10-2020 09:28

Subject

CN=GALAXY LABORATORY,OU=GALAXY LABORATORY,O=GALAXY LABORATORY,L=GALAXY LABORATORY,ST=GALAXY LABORATORY,C=UK,1.2.840.113549.1.9.1=#0c1747616c617879536f667440666f72746e6974652e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02-05-2019 00:00

Not After

01-08-2030 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e6
Certificate

Issuer

CN=Ascertia Root CA 2,O=Ascertia,C=GB

Not Before

21-04-2009 12:15

Not After

14-04-2028 23:59

Subject

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

26:63:10:d5:bf:1a:1e:4a:2f:0a:4f:45:80:98:d9:31:77:7c:12:c4
Certificate

Issuer

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Not Before

27-09-2020 09:28

Not After

27-10-2020 09:28

Subject

CN=GALAXY LABORATORY,OU=GALAXY LABORATORY,O=GALAXY LABORATORY,L=GALAXY LABORATORY,ST=GALAXY LABORATORY,C=UK,1.2.840.113549.1.9.1=#0c1747616c617879536f667440666f72746e6974652e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e6
Certificate

Issuer

CN=Ascertia Root CA 2,O=Ascertia,C=GB

Not Before

21-04-2009 12:15

Not After

14-04-2028 23:59

Subject

CN=Ascertia Public CA 1,O=Ascertia,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02-05-2019 00:00

Not After

01-08-2030 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

51:a3:a5:4c:c4:78:88:0f:13:8d:0f:f8:44:5a:49:c2:16:75:f7:70:bf:af:55:bf:52:6d:a6:81:b0:5a:5d:90
Signer

Actual PE Digest

51:a3:a5:4c:c4:78:88:0f:13:8d:0f:f8:44:5a:49:c2:16:75:f7:70:bf:af:55:bf:52:6d:a6:81:b0:5a:5d:90

Digest Algorithm

sha256

PE Digest Matches

true

db:db:8b:62:0c:a3:3e:6d:45:6f:2f:e6:1a:95:99:1e:63:0c:78:f1
Signer

Actual PE Digest

db:db:8b:62:0c:a3:3e:6d:45:6f:2f:e6:1a:95:99:1e:63:0c:78:f1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

q'= y
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

26:63:10:d5:bf:1a:1e:4a:2f:0a:4f:45:80:98:d9:31:77:7c:12:c4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

e6Certificate

Key Usages

26:63:10:d5:bf:1a:1e:4a:2f:0a:4f:45:80:98:d9:31:77:7c:12:c4Certificate

Extended Key Usages

Key Usages

e6Certificate

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

51:a3:a5:4c:c4:78:88:0f:13:8d:0f:f8:44:5a:49:c2:16:75:f7:70:bf:af:55:bf:52:6d:a6:81:b0:5a:5d:90Signer

db:db:8b:62:0c:a3:3e:6d:45:6f:2f:e6:1a:95:99:1e:63:0c:78:f1Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

q'= y Size: 191KB - Virtual size: 191KB

.text Size: 38KB - Virtual size: 38KB

.rsrc Size: 114KB - Virtual size: 113KB

.reloc Size: 512B - Virtual size: 12B

Size: 512B - Virtual size: 16B

26:63:10:d5:bf:1a:1e:4a:2f:0a:4f:45:80:98:d9:31:77:7c:12:c4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

e6
Certificate

26:63:10:d5:bf:1a:1e:4a:2f:0a:4f:45:80:98:d9:31:77:7c:12:c4
Certificate

e6
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

51:a3:a5:4c:c4:78:88:0f:13:8d:0f:f8:44:5a:49:c2:16:75:f7:70:bf:af:55:bf:52:6d:a6:81:b0:5a:5d:90
Signer

db:db:8b:62:0c:a3:3e:6d:45:6f:2f:e6:1a:95:99:1e:63:0c:78:f1
Signer

q'= y
Size: 191KB - Virtual size: 191KB

.text
Size: 38KB - Virtual size: 38KB

.rsrc
Size: 114KB - Virtual size: 113KB

.reloc
Size: 512B - Virtual size: 12B