a6b0f67a52348ef2ba77f002f8f98364_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a6b0f67a52348ef2ba77f002f8f98364_JaffaCakes118
Size

2.2MB
MD5

a6b0f67a52348ef2ba77f002f8f98364
SHA1

92be49a4197a68259ca75f1532e98c73f7afe8e5
SHA256

bec218b6df90961436a302e1766844e71d907fdd71d9ed57eaa3f2270e436711
SHA512

e361134a0978bba196e5363eee46a3561912b855cbf39a13bce20de55ab1d5075cd0b341be7cacc7472fd4921aff09d8e2538f598266726fd96d4d45d678e62c
SSDEEP

6144:DVOWzv/cOiL3zQUqeMlxCE1HlRXo4E8B2NdDAzqA6tLKcS4jJljQuh+0gl29JYIo:R4A

Score

1^/10

Malware Config

Signatures

Files

a6b0f67a52348ef2ba77f002f8f98364_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

56:00:00:01:75:73:76:cd:78:ad:00:0c:9a:00:00:00:00:01:75
Certificate

Issuer

CN=Intel External Issuing CA 7B,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Not Before

08/11/2016, 10:13

Not After

08/11/2018, 10:13

Subject

CN=Intel(R) Embedded Subsystems and IP Blocks Group,OU=EIG,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

06:9b:5e:99:27:72:84:c8:76:7f:13:68:a7:de:b0:f3
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

28/10/2015, 00:00

Not After

17/06/2021, 23:59

Subject

CN=Intel External Issuing CA 7B,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:35:d8:d5:59:5b:06:71:41:2b:00:00:00:00:00:35
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/08/2013, 20:26

Not After

15/08/2023, 20:36

Subject

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

69:b2:d1:cc:f0:2e:20:dc:c9:5c:62:89:4f:7f:9e:5f:5f:c0:57:bf
Certificate

Issuer

CN=QuoVadis Root Certification Authority,OU=Root Certification Authority,O=QuoVadis Limited,C=BM

Not Before

30/05/2014, 16:35

Not After

17/03/2021, 18:33

Subject

CN=QuoVadis Issuing CA G4,O=QuoVadis Limited,C=BM

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

17:a7:17:a0:16:72:36:ef:9b:1e:c2:c6:65:fa:8c:20:28:ad:7f:75
Certificate

Issuer

CN=QuoVadis Issuing CA G4,O=QuoVadis Limited,C=BM

Not Before

24/04/2015, 21:44

Not After

24/04/2018, 21:44

Subject

CN=timestamp.intel.com,OU=Thales TSS ESN:E892-D055-162F+OU=Thales TSS ESN:E892-D055-162F,O=Intel Corporation,L=Santa Clara,ST=CA,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

bf:0f:33:bc:0e:f2:bd:6d:bf:9f:5e:45:d8:b5:a4:05:7b:f5:ff:2e:9a:41:99:26:7b:6a:36:7f:09:b4:90:e8
Signer

Actual PE Digest

bf:0f:33:bc:0e:f2:bd:6d:bf:9f:5e:45:d8:b5:a4:05:7b:f5:ff:2e:9a:41:99:26:7b:6a:36:7f:09:b4:90:e8

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

56:00:00:01:75:73:76:cd:78:ad:00:0c:9a:00:00:00:00:01:75Certificate

Extended Key Usages

Key Usages

06:9b:5e:99:27:72:84:c8:76:7f:13:68:a7:de:b0:f3Certificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

33:00:00:00:35:d8:d5:59:5b:06:71:41:2b:00:00:00:00:00:35Certificate

Extended Key Usages

Key Usages

69:b2:d1:cc:f0:2e:20:dc:c9:5c:62:89:4f:7f:9e:5f:5f:c0:57:bfCertificate

Key Usages

17:a7:17:a0:16:72:36:ef:9b:1e:c2:c6:65:fa:8c:20:28:ad:7f:75Certificate

Extended Key Usages

Key Usages

bf:0f:33:bc:0e:f2:bd:6d:bf:9f:5e:45:d8:b5:a4:05:7b:f5:ff:2e:9a:41:99:26:7b:6a:36:7f:09:b4:90:e8Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rsrc Size: 15KB - Virtual size: 14KB

.reloc Size: 512B - Virtual size: 12B

56:00:00:01:75:73:76:cd:78:ad:00:0c:9a:00:00:00:00:01:75
Certificate

06:9b:5e:99:27:72:84:c8:76:7f:13:68:a7:de:b0:f3
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

33:00:00:00:35:d8:d5:59:5b:06:71:41:2b:00:00:00:00:00:35
Certificate

69:b2:d1:cc:f0:2e:20:dc:c9:5c:62:89:4f:7f:9e:5f:5f:c0:57:bf
Certificate

17:a7:17:a0:16:72:36:ef:9b:1e:c2:c6:65:fa:8c:20:28:ad:7f:75
Certificate

bf:0f:33:bc:0e:f2:bd:6d:bf:9f:5e:45:d8:b5:a4:05:7b:f5:ff:2e:9a:41:99:26:7b:6a:36:7f:09:b4:90:e8
Signer

.text
Size: 2.2MB - Virtual size: 2.2MB

.rsrc
Size: 15KB - Virtual size: 14KB

.reloc
Size: 512B - Virtual size: 12B