d718aa6b4be0101e222e822f2ef19808_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d718aa6b4be0101e222e822f2ef19808_JaffaCakes118
Size

42KB
MD5

d718aa6b4be0101e222e822f2ef19808
SHA1

22a9c662e6b96d02d0d0bce1ca8c3ac3ed168448
SHA256

e3c59990f700a4adba1bbdf9c5f3dc4761bb7452e82b5edf99dc1c83ce5d2aa5
SHA512

2a64335679ffe0b17f09b28285c8309e88936ac37fdd870b1b3254c2260b5f8ae9b45b16c4333179addc2d96ea57a28d71e4ac1983622e34645a521679d5b9f9
SSDEEP

768:P585xPZAoARlmP8Wo8GeiIS6EJSLpaXeA8wvgCZgHCzeuW85VGOjRHE//D/ky:B83ZYlmPJupI9EILQXmrCZgHay8bFRHq

Score

1^/10

Malware Config

Signatures

Files

d718aa6b4be0101e222e822f2ef19808_JaffaCakes118
.eml
Vsl S005883020026916.zip
.zip
Vsl S005883020026916.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

3c:21:af:28:c8:bc:1c:b2:f1:35:fa:bb:69:79:01:da
Certificate

Issuer

CN=西Б西艾艾Б西Б西艾艾艾Б伊艾西伊艾艾Б艾艾西伊艾,OU=Щ艾马诶马艾马Д弗马艾Д马马马艾ДД马ДЩ马ЩД诶Щ弗马艾,O=Д马马Щ艾Д弗艾诶诶诶Д弗弗马马马马诶诶Щ诶,L=Guangzhou,C=CN

Not Before

01/10/2020, 02:34

Not After

01/10/2021, 02:34

Subject

CN=西Б西艾艾Б西Б西艾艾艾Б伊艾西伊艾艾Б艾艾西伊艾,OU=Щ艾马诶马艾马Д弗马艾Д马马马艾ДД马ДЩ马ЩД诶Щ弗马艾,O=Д马马Щ艾Д弗艾诶诶诶Д弗弗马马马马诶诶Щ诶,L=Guangzhou,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

97:ed:db:a0:8e:5a:0a:88:f6:ff:e3:5c:d9:fa:4e:18:ac:bd:8a:63:ed:e8:4b:6b:7e:b2:8f:54:6f:44:44:ed
Signer

Actual PE Digest

97:ed:db:a0:8e:5a:0a:88:f6:ff:e3:5c:d9:fa:4e:18:ac:bd:8a:63:ed:e8:4b:6b:7e:b2:8f:54:6f:44:44:ed

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-html-1.txt

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

3c:21:af:28:c8:bc:1c:b2:f1:35:fa:bb:69:79:01:daCertificate

Extended Key Usages

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

97:ed:db:a0:8e:5a:0a:88:f6:ff:e3:5c:d9:fa:4e:18:ac:bd:8a:63:ed:e8:4b:6b:7e:b2:8f:54:6f:44:44:edSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 50KB - Virtual size: 50KB

.rsrc Size: 1024B - Virtual size: 932B

.reloc Size: 512B - Virtual size: 12B

3c:21:af:28:c8:bc:1c:b2:f1:35:fa:bb:69:79:01:da
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

97:ed:db:a0:8e:5a:0a:88:f6:ff:e3:5c:d9:fa:4e:18:ac:bd:8a:63:ed:e8:4b:6b:7e:b2:8f:54:6f:44:44:ed
Signer

.text
Size: 50KB - Virtual size: 50KB

.rsrc
Size: 1024B - Virtual size: 932B

.reloc
Size: 512B - Virtual size: 12B