cf4eb41c8d9470fe1f4d7a26ff544b02_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

cf4eb41c8d9470fe1f4d7a26ff544b02_JaffaCakes118
Size

7.3MB
MD5

cf4eb41c8d9470fe1f4d7a26ff544b02
SHA1

1b934daa79563da218440f4ee432ce8073c5d096
SHA256

fe45eefe6f4ea1ebc98f18b5068b92b32f0493dbcd7dfeb5c75d02d269ae7866
SHA512

8393e57306ea8c1e847ebf91d9f19f256b40785341127a4787f9be07a014c4b8f99ed4d3eb6b22a380b2d924128fcc296e9c3afbb43520c5e975ca6b86f33b75
SSDEEP

196608:OMInHiaxd7l1n3xMDjUC3CNRNLurYGOcA1wnRdAJ:OMInHiavl1B8jUCy7OTDDnRK

Score

1^/10

Malware Config

Signatures

Files

cf4eb41c8d9470fe1f4d7a26ff544b02_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Code Sign

bc:91:12:f2:11:22:a2:b8:15:ca:35:aa:1e:fc:55:2e
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

22/03/2017, 00:00

Not After

19/07/2017, 23:59

Subject

CN=LLC\, BAFIR,O=LLC\, BAFIR,POSTALCODE=180004,STREET=Lva Tolstova\, 24\, 2001,L=Pskov,ST=RU,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

6
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

6
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: - Virtual size: 13KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: - Virtual size: 872B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

6
Size: - Virtual size: 2.8MB

IMAGE_SCN_MEM_WRITE

6
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

6
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

6
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: 14KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 15.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

bc:91:12:f2:11:22:a2:b8:15:ca:35:aa:1e:fc:55:2eCertificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

Signer

Headers

File Characteristics

Sections

6 Size: - Virtual size: 1.3MB

6 Size: - Virtual size: 25KB

6 Size: - Virtual size: 5KB

6 Size: - Virtual size: 13KB

6 Size: - Virtual size: 872B

6 Size: - Virtual size: 2.8MB

6 Size: 3.1MB - Virtual size: 3.1MB

6 Size: 512B - Virtual size: 584B

6 Size: 16KB - Virtual size: 18KB

6 Size: 9KB - Virtual size: 8KB

6 Size: 14KB - Virtual size: 52KB

.rsrc Size: 37KB - Virtual size: 15.0MB

bc:91:12:f2:11:22:a2:b8:15:ca:35:aa:1e:fc:55:2e
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

6
Size: - Virtual size: 1.3MB

6
Size: - Virtual size: 25KB

6
Size: - Virtual size: 5KB

6
Size: - Virtual size: 13KB

6
Size: - Virtual size: 872B

6
Size: - Virtual size: 2.8MB

6
Size: 3.1MB - Virtual size: 3.1MB

6
Size: 512B - Virtual size: 584B

6
Size: 16KB - Virtual size: 18KB

6
Size: 9KB - Virtual size: 8KB

6
Size: 14KB - Virtual size: 52KB

.rsrc
Size: 37KB - Virtual size: 15.0MB