a0d347ef6a5342d04a1ef5e9ebaea0fa_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a0d347ef6a5342d04a1ef5e9ebaea0fa_JaffaCakes118
Size

46KB
MD5

a0d347ef6a5342d04a1ef5e9ebaea0fa
SHA1

dc10116e6768747d75966b838d5a864576ec6fdd
SHA256

efb766bafc5a440a11844aa3b533ada11993256a93c656c244b654d803ad1aac
SHA512

4a5456ecb1cb8b94020b41dca84442ef4a42a02d6338e704ba2702b359a6636563fe57206efd8ab2c652b5fc7959805e77cff8f72429074ab59f0e0fa0612fdb
SSDEEP

768:8FAyLBZVZpHG2v4nQTzidnOlRVUSMKAjFtCvZkMiRtrOiRtQWFAdX:YhVZpsnQ1DUvKHMrOMa

Score

1^/10

Malware Config

Signatures

Files

a0d347ef6a5342d04a1ef5e9ebaea0fa_JaffaCakes118
.exe windows:5 windows x64 arch:x64

afde06f70eb61e4b61005e737ab36fb0

Code Sign

07
Certificate

Issuer

CN=Starfield Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:e6:3a:c9:92:ef:67:ba
Certificate

Issuer

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

09/09/2020, 07:00

Not After

09/09/2025, 07:00

Subject

CN=Starfield Timestamp Authority - G2,O=Starfield Technologies\, LLC,L=Scottsdale,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/12/2014, 00:00

Not After

02/12/2029, 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6d
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

28/08/2020, 00:00

Not After

28/08/2021, 23:59

Subject

SERIALNUMBER=91440400MA51NE7R6U,CN=珠海源泽咨询有限公司,O=珠海源泽咨询有限公司,POSTALCODE=519031,STREET=横琴新区宝华路6号105室-48741(集中办公区),L=珠海市,ST=Guangdong Sheng,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:18:54:86:00:00:00:00:00:24
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/04/2011, 22:06

Not After

11/04/2021, 22:16

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/12/2014, 00:00

Not After

02/12/2029, 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6d
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

28/08/2020, 00:00

Not After

28/08/2021, 23:59

Subject

SERIALNUMBER=91440400MA51NE7R6U,CN=珠海源泽咨询有限公司,O=珠海源泽咨询有限公司,POSTALCODE=519031,STREET=横琴新区宝华路6号105室-48741(集中办公区),L=珠海市,ST=Guangdong Sheng,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:18:54:86:00:00:00:00:00:24
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/04/2011, 22:06

Not After

11/04/2021, 22:16

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07
Certificate

Issuer

CN=Starfield Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:e6:3a:c9:92:ef:67:ba
Certificate

Issuer

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

09/09/2020, 07:00

Not After

09/09/2025, 07:00

Subject

CN=Starfield Timestamp Authority - G2,O=Starfield Technologies\, LLC,L=Scottsdale,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

36:d7:4d:77:40:d7:2e:20:cd:b5:f6:bc:b8:c8:e7:b8:49:e0:b1:57:bc:d6:53:85:88:d8:c7:92:a4:03:23:72
Signer

Actual PE Digest

36:d7:4d:77:40:d7:2e:20:cd:b5:f6:bc:b8:c8:e7:b8:49:e0:b1:57:bc:d6:53:85:88:d8:c7:92:a4:03:23:72

Digest Algorithm

sha256

PE Digest Matches

false

18:80:cb:30:21:7d:05:a9:17:a5:b3:80:e0:61:44:11:b6:a0:54:a3
Signer

Actual PE Digest

18:80:cb:30:21:7d:05:a9:17:a5:b3:80:e0:61:44:11:b6:a0:54:a3

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetProcAddress
GetTickCount
LoadLibraryW

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

afde06f70eb61e4b61005e737ab36fb0

Code Sign

07Certificate

Key Usages

0b:e6:3a:c9:92:ef:67:baCertificate

Extended Key Usages

Key Usages

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1Certificate

Extended Key Usages

Key Usages

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6dCertificate

Extended Key Usages

Key Usages

61:18:54:86:00:00:00:00:00:24Certificate

Key Usages

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1Certificate

Extended Key Usages

Key Usages

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6dCertificate

Extended Key Usages

Key Usages

61:18:54:86:00:00:00:00:00:24Certificate

Key Usages

07Certificate

Key Usages

0b:e6:3a:c9:92:ef:67:baCertificate

Extended Key Usages

Key Usages

36:d7:4d:77:40:d7:2e:20:cd:b5:f6:bc:b8:c8:e7:b8:49:e0:b1:57:bc:d6:53:85:88:d8:c7:92:a4:03:23:72Signer

18:80:cb:30:21:7d:05:a9:17:a5:b3:80:e0:61:44:11:b6:a0:54:a3Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: - Virtual size: 536B

.pdata Size: 512B - Virtual size: 168B

.rsrc Size: 512B - Virtual size: 488B

07
Certificate

0b:e6:3a:c9:92:ef:67:ba
Certificate

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6d
Certificate

61:18:54:86:00:00:00:00:00:24
Certificate

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

98:d4:b7:2b:8f:b6:7e:55:06:0a:96:0f:14:ae:26:6d
Certificate

61:18:54:86:00:00:00:00:00:24
Certificate

07
Certificate

0b:e6:3a:c9:92:ef:67:ba
Certificate

36:d7:4d:77:40:d7:2e:20:cd:b5:f6:bc:b8:c8:e7:b8:49:e0:b1:57:bc:d6:53:85:88:d8:c7:92:a4:03:23:72
Signer

18:80:cb:30:21:7d:05:a9:17:a5:b3:80:e0:61:44:11:b6:a0:54:a3
Signer

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: - Virtual size: 536B

.pdata
Size: 512B - Virtual size: 168B

.rsrc
Size: 512B - Virtual size: 488B