bdbaa8cfd9ab4cdba8b6e75c0a1d20b8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bdbaa8cfd9ab4cdba8b6e75c0a1d20b8_JaffaCakes118
Size

89KB
MD5

bdbaa8cfd9ab4cdba8b6e75c0a1d20b8
SHA1

0b4725f7847c4bb6a879827331ac58c842a4d2d6
SHA256

b3e1c7c5c8657228d72028e38dec667787c801558808ce7c6240336f3aebe05e
SHA512

24b272c82de1d7f024acc456414e618e1a32183ab7d2cece6a7d7b0b029b5580f12302749efb316fac63043e9ddf86ba0a2f39b4fb7f213af91e92e7f43913d2
SSDEEP

192:syOAfT++QnMWY7W4LiM/aErlnkTN2+goXeklGbhRnATfNSzeKpaErlnkTN2+goXk:safq+jWY7W4uehe1HGtyzWhe1HGtyzM

Score

1^/10

Malware Config

Signatures

Files

bdbaa8cfd9ab4cdba8b6e75c0a1d20b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0efe937161caf90a65e7e684431c5aa1

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/12/2000, 08:00

Not After

12/11/2005, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:07:11:43:00:00:00:00:00:34
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/05/2002, 00:55

Not After

25/11/2003, 01:05

Subject

CN=Microsoft Corporation,OU=Copyright (c) 2002 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

eb:fa:fc:49:f2:35:3f:7b:f5:80:14:8a:95:bf:66:3b:45:d7:67:55
Signer

Actual PE Digest

eb:fa:fc:49:f2:35:3f:7b:f5:80:14:8a:95:bf:66:3b:45:d7:67:55

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

finder.pdb

Imports

msvcrt

_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
_exit
_adjust_fdiv
_c_exit

kernel32

GetModuleHandleA
GetStartupInfoA

outllib

FMessageLoop@12
RenInitInstance@12
RenExitInstance@0

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0efe937161caf90a65e7e684431c5aa1

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9dCertificate

Extended Key Usages

Key Usages

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6Certificate

Extended Key Usages

Key Usages

61:07:11:43:00:00:00:00:00:34Certificate

Extended Key Usages

Key Usages

eb:fa:fc:49:f2:35:3f:7b:f5:80:14:8a:95:bf:66:3b:45:d7:67:55Signer

Headers

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

outllib

Sections

.text Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 48B

.rsrc Size: 3KB - Virtual size: 2KB

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

61:07:11:43:00:00:00:00:00:34
Certificate

eb:fa:fc:49:f2:35:3f:7b:f5:80:14:8a:95:bf:66:3b:45:d7:67:55
Signer

.text
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 48B

.rsrc
Size: 3KB - Virtual size: 2KB