df335a8c17a1eba36fcbdb18f1b42d19_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

df335a8c17a1eba36fcbdb18f1b42d19_JaffaCakes118
Size

2.1MB
MD5

df335a8c17a1eba36fcbdb18f1b42d19
SHA1

4ee27b5ae050926d38b098ea74e940cfaebaf0a9
SHA256

4d2ce22620e63b6f1d9452326b50222c439d5bf3dac4c0e3ea7daf051d6254c4
SHA512

48cece95fe0f193300bab35e7ceba9fff1687b93195cedea06c395f73f4eb410251ecc2016bcad26a2cc5d7474df478313569fa589d27513bb629e67e7cf6c3c
SSDEEP

49152:nkXExm21vdUpeZNeyx0nuVagr6I4dNZ+jxFZ9Eja+BsS4OiNM8Nlsgth8D3lOioI:nkUx712eZNeyx0nmbr6I43Z+9FjEja+Z

Score

1^/10

Malware Config

Signatures

Files

df335a8c17a1eba36fcbdb18f1b42d19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4e
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/07/2014, 20:32

Not After

01/10/2015, 20:32

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d8:2e:e0:53:69:a0:72:dc:b7:ac:87:cf:9a:59:2f:ab:c9:58:cb:3c:e4:64:f0:3a:ad:9d:b9:01:f9:55:4a:38
Signer

Actual PE Digest

d8:2e:e0:53:69:a0:72:dc:b7:ac:87:cf:9a:59:2f:ab:c9:58:cb:3c:e4:64:f0:3a:ad:9d:b9:01:f9:55:4a:38

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

d8:2e:e0:53:69:a0:72:dc:b7:ac:87:cf:9a:59:2f:ab:c9:58:cb:3c:e4:64:f0:3a:ad:9d:b9:01:f9:55:4a:38Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rsrc Size: 1024B - Virtual size: 988B

.reloc Size: 512B - Virtual size: 12B

33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4e
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

d8:2e:e0:53:69:a0:72:dc:b7:ac:87:cf:9a:59:2f:ab:c9:58:cb:3c:e4:64:f0:3a:ad:9d:b9:01:f9:55:4a:38
Signer

.text
Size: 2.1MB - Virtual size: 2.1MB

.rsrc
Size: 1024B - Virtual size: 988B

.reloc
Size: 512B - Virtual size: 12B