d208328b1d0996cb3d1d730f0612303d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

d208328b1d0996cb3d1d730f0612303d_JaffaCakes118
Size

246KB
MD5

d208328b1d0996cb3d1d730f0612303d
SHA1

fed786f708e4d412b63994741218834ead1c81ee
SHA256

8ad3b43d19cc98a7b964e4a567775dfcc33b0c550ef474fd430879e918d2c343
SHA512

907a336803b1fa410f6dc4015e80aa4a2b23b240855a93e97b78887b3a0acd3608d2b45c1025fa7fbd5071f19fcf6c9d152ed9901796a7f53f76bf4e9748ac92
SSDEEP

6144:bJUB8mj4VuAzApYF4H5w/a1YNLV+SDtUNDNGuM:buSmSuAzApRCCYNRhDtUHGu

Score

1^/10

Malware Config

Signatures

Files

d208328b1d0996cb3d1d730f0612303d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

ee:43:56:b2:aa:d7:ab:19:ae:41:5c:f3:95:32:27:da
Certificate

Issuer

CN=Avast Software s.r.o.,OU=RE 999,O=Avast Software s.r.o.,L=Prague,C=CZ

Not Before

21-07-2020 05:44

Not After

21-07-2021 05:44

Subject

CN=Avast Software s.r.o.,OU=RE 999,O=Avast Software s.r.o.,L=Prague,C=CZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02-05-2019 00:00

Not After

01-08-2030 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c8:79:32:c1:8d:ec:6d:8b:57:45:9b:ea:3b:d4:c1:1e:03:cb:00:1f:f5:05:e5:43:cd:62:6b:c8:ab:2e:74:55
Signer

Actual PE Digest

c8:79:32:c1:8d:ec:6d:8b:57:45:9b:ea:3b:d4:c1:1e:03:cb:00:1f:f5:05:e5:43:cd:62:6b:c8:ab:2e:74:55

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

ee:43:56:b2:aa:d7:ab:19:ae:41:5c:f3:95:32:27:daCertificate

Extended Key Usages

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

c8:79:32:c1:8d:ec:6d:8b:57:45:9b:ea:3b:d4:c1:1e:03:cb:00:1f:f5:05:e5:43:cd:62:6b:c8:ab:2e:74:55Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 188KB - Virtual size: 188KB

.rsrc Size: 53KB - Virtual size: 52KB

.reloc Size: 512B - Virtual size: 12B

ee:43:56:b2:aa:d7:ab:19:ae:41:5c:f3:95:32:27:da
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

c8:79:32:c1:8d:ec:6d:8b:57:45:9b:ea:3b:d4:c1:1e:03:cb:00:1f:f5:05:e5:43:cd:62:6b:c8:ab:2e:74:55
Signer

.text
Size: 188KB - Virtual size: 188KB

.rsrc
Size: 53KB - Virtual size: 52KB

.reloc
Size: 512B - Virtual size: 12B