a5a8b016b9bed60ff585a451c2aafb7a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a5a8b016b9bed60ff585a451c2aafb7a_JaffaCakes118
Size

94KB
MD5

a5a8b016b9bed60ff585a451c2aafb7a
SHA1

943ca8c45f4b8e182f15135c38e33de4ff5ed218
SHA256

3dd5c54071431e7f9d1d50eedb56b0e33f1e9f51a46470c078d9767249f93d40
SHA512

91bd4338b0e7bc056ceea83538d508d498d8b4a53c3475161f6c388e41db1d216b0bc97a43b90980aeacbc671fe4b8a329bf883fcecb5877c0f6a0f8ead5da87
SSDEEP

1536:VZswrWV8RKIuR+Y6HhumumZd7vTfxLEDyobn1M0duJCAOlV6GeNerA:V2wWV8Y+7BfZpvT5LElbnpSilV1eA

Score

1^/10

Malware Config

Signatures

Files

a5a8b016b9bed60ff585a451c2aafb7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Code Sign

0f:9c:97:1e:a3:df:51:6a:b9:21:8a:3b:26:9b:d6:a9
Certificate

Issuer

CN=Microsoft Code Signing PCA

Not Before

30/06/2010, 14:31

Not After

31/12/2039, 23:59

Subject

CN=Microsoft Code Signing PCA

24:9a:1e:2a:aa:52:be:41:be:f1:a8:ec:ab:1e:f2:1c
Certificate

Issuer

CN=Microsoft Code Signing PCA

Not Before

30/06/2010, 14:32

Not After

31/12/2039, 23:59

Subject

CN=Microsoft Corporation

ca:c4:39:79:94:3a:a6:c7:ac:02:8c:2a:9c:92:e0:90:4f:5d:45:06
Signer

Actual PE Digest

ca:c4:39:79:94:3a:a6:c7:ac:02:8c:2a:9c:92:e0:90:4f:5d:45:06

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 63KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PEPack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xpr01
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

0f:9c:97:1e:a3:df:51:6a:b9:21:8a:3b:26:9b:d6:a9Certificate

24:9a:1e:2a:aa:52:be:41:be:f1:a8:ec:ab:1e:f2:1cCertificate

ca:c4:39:79:94:3a:a6:c7:ac:02:8c:2a:9c:92:e0:90:4f:5d:45:06Signer

Headers

File Characteristics

Sections

CODE Size: 63KB - Virtual size: 148KB

DATA Size: 5KB - Virtual size: 8KB

BSS Size: - Virtual size: 8KB

.idata Size: 2KB - Virtual size: 8KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: - Virtual size: 12KB

.rsrc Size: 15KB - Virtual size: 24KB

.PEPack Size: 5KB - Virtual size: 8KB

.xpr01 Size: - Virtual size: 4KB

0f:9c:97:1e:a3:df:51:6a:b9:21:8a:3b:26:9b:d6:a9
Certificate

24:9a:1e:2a:aa:52:be:41:be:f1:a8:ec:ab:1e:f2:1c
Certificate

ca:c4:39:79:94:3a:a6:c7:ac:02:8c:2a:9c:92:e0:90:4f:5d:45:06
Signer

CODE
Size: 63KB - Virtual size: 148KB

DATA
Size: 5KB - Virtual size: 8KB

BSS
Size: - Virtual size: 8KB

.idata
Size: 2KB - Virtual size: 8KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size: 12KB

.rsrc
Size: 15KB - Virtual size: 24KB

.PEPack
Size: 5KB - Virtual size: 8KB

.xpr01
Size: - Virtual size: 4KB