e2155e25a72268391aa32dcccac92947_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

e2155e25a72268391aa32dcccac92947_JaffaCakes118
Size

17KB
MD5

e2155e25a72268391aa32dcccac92947
SHA1

4ec5510cb5db5f3e71486d3d615cf22b3b616d33
SHA256

68c9d94a589e10d157594d669890faf59c9b54848b7912ff403af53550c2ba14
SHA512

b265040733e91c2eecddb736263dff82783fe4d60238b6da8e36c8a6fb78a7d117aa19e2414f49b86c5aaeaba27aea9a1b33beba296c95d08684619aa6b8ca84
SSDEEP

384:lShnV5YY/IO96SUNg9QSGyLUtb1dNwqbhEq:Uhn3rIO9WNTy2vrhR

Score

1^/10

Malware Config

Signatures

Files

e2155e25a72268391aa32dcccac92947_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

4a:a8:0b:8b:d4:40:aa:9e:48:05:1c:11:8f:8d:e9:80
Certificate

Issuer

CN=SmytjvnrSRGb,OU=ZDQjVwHISuUlBhNyjyOhR,O=LtUVCYyWgtcaEcEbPkXJrZIkQZy,L=WchshPzBJLsiqc,ST=vDgvyXafZbewNoKZDElogOhi,C=ntwzDXCMKuzMmlnZbtgKdNmZMODeN,2.5.4.12=#131c6b6c6a61736b7269726e6870594d56596970714c634e78567173474d,1.2.840.113549.1.9.1=#131a6c434955584a4d4b4a6544417974714454666875566a76704d68

Not Before

18/02/2021, 05:10

Not After

18/02/2022, 05:10

Subject

CN=SmytjvnrSRGb,OU=ZDQjVwHISuUlBhNyjyOhR,O=LtUVCYyWgtcaEcEbPkXJrZIkQZy,L=WchshPzBJLsiqc,ST=vDgvyXafZbewNoKZDElogOhi,C=ntwzDXCMKuzMmlnZbtgKdNmZMODeN,2.5.4.12=#131c6b6c6a61736b7269726e6870594d56596970714c634e78567173474d,1.2.840.113549.1.9.1=#131a6c434955584a4d4b4a6544417974714454666875566a76704d68

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

aa:10:f6:1d:20:b8:e5:bd:e2:79:80:47:e4:21:e0:5f:67:d6:c4:f8:62:fd:dc:3d:a0:65:ea:be:40:ea:2a:f3
Signer

Actual PE Digest

aa:10:f6:1d:20:b8:e5:bd:e2:79:80:47:e4:21:e0:5f:67:d6:c4:f8:62:fd:dc:3d:a0:65:ea:be:40:ea:2a:f3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

4a:a8:0b:8b:d4:40:aa:9e:48:05:1c:11:8f:8d:e9:80Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

aa:10:f6:1d:20:b8:e5:bd:e2:79:80:47:e4:21:e0:5f:67:d6:c4:f8:62:fd:dc:3d:a0:65:ea:be:40:ea:2a:f3Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 10KB - Virtual size: 9KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

4a:a8:0b:8b:d4:40:aa:9e:48:05:1c:11:8f:8d:e9:80
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

aa:10:f6:1d:20:b8:e5:bd:e2:79:80:47:e4:21:e0:5f:67:d6:c4:f8:62:fd:dc:3d:a0:65:ea:be:40:ea:2a:f3
Signer

.text
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B