e1188dcf1d263848bbc3a9e0e000fa5d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

e1188dcf1d263848bbc3a9e0e000fa5d_JaffaCakes118
Size

2.6MB
MD5

e1188dcf1d263848bbc3a9e0e000fa5d
SHA1

30ec0f03ff134f6835e5a1f9ac50d2f1f203f3b9
SHA256

143baeea153f94dec6b4ae148ce7f7db97b1aa8d034803a945e069143504263e
SHA512

021f52ab015eabe04443efe38d848760d971352a422c93ead6ca15566d377e015ff16decd45c62047eeaf76a13959956127d4763b59190d777e8d6249f3b6adf
SSDEEP

49152:cvm6WWeedeXKl+GlMfZDebimoMpgeAwXYjb/D652jYdJT0:4mVWVfl+GqZDBmoDU9bT

Score

1^/10

Malware Config

Signatures

Files

e1188dcf1d263848bbc3a9e0e000fa5d_JaffaCakes118
.exe windows:6 windows x64 arch:x64

baa93d47220682c04d92f7797d9224ce

Code Sign

0b:d9:94:03:e9:d8:02:3c:5a:5b:a4:cb:5a:c7:32:04
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/03/2019, 00:00

Not After

24/03/2021, 23:59

Subject

CN=Wagnardsoft,O=Wagnardsoft,POSTALCODE=J7N 0W5,STREET=16915 Rue de la Perle,L=Mirabel,ST=Quebec,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a2:02:0e:ba:33:dc:cd:08:ce:43:3b:39:ee:6b:7c:67:6e:70:19:92:79:84:c3:dc:01:fb:94:14:f5:aa:3d:5d
Signer

Actual PE Digest

a2:02:0e:ba:33:dc:cd:08:ce:43:3b:39:ee:6b:7c:67:6e:70:19:92:79:84:c3:dc:01:fb:94:14:f5:aa:3d:5d

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 419KB - Virtual size: 792KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rtgeamzl
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

syyeycfy
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

baa93d47220682c04d92f7797d9224ce

Code Sign

0b:d9:94:03:e9:d8:02:3c:5a:5b:a4:cb:5a:c7:32:04Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

a2:02:0e:ba:33:dc:cd:08:ce:43:3b:39:ee:6b:7c:67:6e:70:19:92:79:84:c3:dc:01:fb:94:14:f5:aa:3d:5dSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comctl32

Sections

Size: 419KB - Virtual size: 792KB

.rsrc Size: 2KB - Virtual size: 2KB

.idata Size: 512B - Virtual size: 4KB

Size: 512B - Virtual size: 3.7MB

rtgeamzl Size: 2.1MB - Virtual size: 2.1MB

syyeycfy Size: 512B - Virtual size: 4KB

.pdata Size: 21KB - Virtual size: 24KB

0b:d9:94:03:e9:d8:02:3c:5a:5b:a4:cb:5a:c7:32:04
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

a2:02:0e:ba:33:dc:cd:08:ce:43:3b:39:ee:6b:7c:67:6e:70:19:92:79:84:c3:dc:01:fb:94:14:f5:aa:3d:5d
Signer

.rsrc
Size: 2KB - Virtual size: 2KB

.idata
Size: 512B - Virtual size: 4KB

rtgeamzl
Size: 2.1MB - Virtual size: 2.1MB

syyeycfy
Size: 512B - Virtual size: 4KB

.pdata
Size: 21KB - Virtual size: 24KB