db8a251f8327ef738e98aa3c7c167eeb_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

db8a251f8327ef738e98aa3c7c167eeb_JaffaCakes118
Size

768KB
MD5

db8a251f8327ef738e98aa3c7c167eeb
SHA1

77e5a6113f424e4585d231a376e400ee0897fa99
SHA256

fee8ddb924a82a56d03976aff871f5d1a3d0e7946927288878c177a7e63ed978
SHA512

797e1e60cd6e9d021eca974124127c184bfc1bed8bb458776b085358b0cadd94aabc7b8e1f08d0c58e437c3b511c355cef0eb1ea84d5dcdd54da82ae1f202099
SSDEEP

12288:n6pLB9ZN1jDTW5AwEAH7Z1fyg2nCvoyO2tPvP5c07coSaS/UDZWPqLVP:6lBN13TW5AZ6Zt+CvnO2tdhv0qB

Score

1^/10

Malware Config

Signatures

Files

db8a251f8327ef738e98aa3c7c167eeb_JaffaCakes118
.exe windows:0 windows x86 arch:x86

Code Sign

55:21:db:26:ce:0c:b3:e4
Certificate

Issuer

CN=TrustAsia.com Code Signing CA,O=Dotsoft Technologies\, Inc.,C=CN

Not Before

01-03-2011 01:07

Not After

01-03-2014 01:07

Subject

CN=亚洲诚信数字签名测试证书,O=上海域联软件技术有限公司,L=上海市,ST=上海市,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

86:9e:56:e2:ab:00:b1:87:8b:b2:ce:5b:bf:4d:d1:ea:c3:fa:3f:85
Signer

Actual PE Digest

86:9e:56:e2:ab:00:b1:87:8b:b2:ce:5b:bf:4d:d1:ea:c3:fa:3f:85

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 661KB - Virtual size: 664KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mackt
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.add
Size: 256B - Virtual size: 400B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

55:21:db:26:ce:0c:b3:e4Certificate

Extended Key Usages

Key Usages

86:9e:56:e2:ab:00:b1:87:8b:b2:ce:5b:bf:4d:d1:ea:c3:fa:3f:85Signer

Headers

File Characteristics

Sections

CODE Size: 661KB - Virtual size: 664KB

DATA Size: 12KB - Virtual size: 16KB

BSS Size: - Virtual size: 8KB

.idata Size: 3KB - Virtual size: 16KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.reloc Size: 41KB - Virtual size: 44KB

.rsrc Size: 34KB - Virtual size: 33KB

.mackt Size: 11KB - Virtual size: 12KB

.add Size: 256B - Virtual size: 400B

55:21:db:26:ce:0c:b3:e4
Certificate

86:9e:56:e2:ab:00:b1:87:8b:b2:ce:5b:bf:4d:d1:ea:c3:fa:3f:85
Signer

CODE
Size: 661KB - Virtual size: 664KB

DATA
Size: 12KB - Virtual size: 16KB

BSS
Size: - Virtual size: 8KB

.idata
Size: 3KB - Virtual size: 16KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.reloc
Size: 41KB - Virtual size: 44KB

.rsrc
Size: 34KB - Virtual size: 33KB

.mackt
Size: 11KB - Virtual size: 12KB

.add
Size: 256B - Virtual size: 400B