d1a02f7eb219089047f27540ab9e4b90_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d1a02f7eb219089047f27540ab9e4b90_JaffaCakes118
Size

1.3MB
MD5

d1a02f7eb219089047f27540ab9e4b90
SHA1

64815f8b7211e0d65878743321dfbd8b22d1fc9f
SHA256

dae19722c7eb6979afe4a139c562b7655a31fd2379fa36035c39c776d793618e
SHA512

d90ea4768c1a2d55d19739319b9786b5db9254f6deb74aa43039bc505b24618e0085b370f63f6e1e2e06986a6e13c2f9e9bd01dcb4161da081afdc8653288fad
SSDEEP

6144:3iBzlNM111hacBzxlllTwZt7szJJ/CEZDQwG4ZLcGMQbLLbL3J15H/VOw2qKZZCb:DCLvvvvvEvvvvv9km7Dog6S/YI

Score

1^/10

Malware Config

Signatures

Files

d1a02f7eb219089047f27540ab9e4b90_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-09-2012 21:12

Not After

04-12-2013 21:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24-01-2013 22:33

Not After

24-04-2014 22:33

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ba:37:70:e9:fa:1e:9e:5f:2f:1b:17:67:24:70:34:3c:90:31:6a:40
Signer

Actual PE Digest

ba:37:70:e9:fa:1e:9e:5f:2f:1b:17:67:24:70:34:3c:90:31:6a:40

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2bCertificate

Extended Key Usages

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0Certificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

ba:37:70:e9:fa:1e:9e:5f:2f:1b:17:67:24:70:34:3c:90:31:6a:40Signer

Headers

DLL Characteristics

File Characteristics

Sections

.rsrc Size: 1.3MB - Virtual size: 1.3MB

33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b
Certificate

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

ba:37:70:e9:fa:1e:9e:5f:2f:1b:17:67:24:70:34:3c:90:31:6a:40
Signer

.rsrc
Size: 1.3MB - Virtual size: 1.3MB