bbe668996a8ab380fade318daed248e4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bbe668996a8ab380fade318daed248e4_JaffaCakes118
Size

125KB
MD5

bbe668996a8ab380fade318daed248e4
SHA1

6ce5f92be0d7b2caa36b5e8c7aef0fc53b7921cf
SHA256

6c2b2a1bc58148329aaf587daf08f39a0eb4ae9edd8e5c41578adc6d9b364990
SHA512

f63d76b5831a258f419f8d54b8e45bfdcf087590590248de1c3fc29f47dcf90b7517a5bdbd56bb3b33c064f57c08c71505ae02706100abe40b2f877871708132
SSDEEP

3072:d+ywJPLjqk+rE5Hd3aOHdQNMHHG74C5pxBkYzO3keWU0xYBxf4/R7d1NhHr6GQtH:EDJ33we

Score

1^/10

Malware Config

Signatures

Files

bbe668996a8ab380fade318daed248e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

07
Certificate

Issuer

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e2:23:16:7a:37:5b:31:60
Certificate

Issuer

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

17/07/2020, 09:02

Not After

16/07/2021, 08:09

Subject

CN=Fendahl Technology Private Limited,O=Fendahl Technology Private Limited,L=Nagpur,ST=Maharashtra,C=IN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

56:49:73:da:a5:3c:b2:57:1c:17:e0:1a:20:17:a1:95:32:df:ff:b4:90:f5:c1:8a:75:85:bd:76:23:ad:71:95
Signer

Actual PE Digest

56:49:73:da:a5:3c:b2:57:1c:17:e0:1a:20:17:a1:95:32:df:ff:b4:90:f5:c1:8a:75:85:bd:76:23:ad:71:95

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Verma\FusionCTRMClient2017\branches\FusionCTRM_MasterDemo\FusionCTRMReferenceDataCache\obj\x86\Debug\FusionCTRMReferenceDataCache.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

07Certificate

Key Usages

e2:23:16:7a:37:5b:31:60Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

56:49:73:da:a5:3c:b2:57:1c:17:e0:1a:20:17:a1:95:32:df:ff:b4:90:f5:c1:8a:75:85:bd:76:23:ad:71:95Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 110KB - Virtual size: 109KB

.rsrc Size: 7KB - Virtual size: 7KB

.reloc Size: 512B - Virtual size: 12B

07
Certificate

e2:23:16:7a:37:5b:31:60
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

56:49:73:da:a5:3c:b2:57:1c:17:e0:1a:20:17:a1:95:32:df:ff:b4:90:f5:c1:8a:75:85:bd:76:23:ad:71:95
Signer

.text
Size: 110KB - Virtual size: 109KB

.rsrc
Size: 7KB - Virtual size: 7KB

.reloc
Size: 512B - Virtual size: 12B