fe849766195a6d7581ecac3b6c9fb82a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fe849766195a6d7581ecac3b6c9fb82a_JaffaCakes118
Size

448KB
MD5

fe849766195a6d7581ecac3b6c9fb82a
SHA1

e10d60efdf776a24201e8983d822e1c1da1def97
SHA256

bc2e03ca292da305602c8755453fa87073810a6359f2ec9a0935fe3bb51ef886
SHA512

b5d571e3b704547d8f13385e7285902c283230de0b3f1ef20697b9bf5ee983994cb1a3de56747b33d6fa5b0c84d73a4f9d7dd7b1d5d332a6b907138e8044adf0
SSDEEP

6144:nxEp/E3R/En9xdfb4VlYBGxsmHeo19SIls73n+88/RUr:xEp8ixsKm+odKOir

Score

1^/10

Malware Config

Signatures

Files

fe849766195a6d7581ecac3b6c9fb82a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

52:e9:68:c0:67:99:e6:44:a2:ee:34:2c:90:dc:28:14
Certificate

Issuer

CN=Т艾开吉Т豆Т豆吉ТТТ吉尔吉Т艾豆艾吉开Т开Т开豆ТТ尔,OU=尔艾豆Т吉豆尔,O=Т开开尔吉尔吉开尔尔开豆艾豆Т艾尔开Т开开豆,L=Guangzhou,C=CN

Not Before

24/09/2020, 06:26

Not After

24/09/2021, 06:26

Subject

CN=Т艾开吉Т豆Т豆吉ТТТ吉尔吉Т艾豆艾吉开Т开Т开豆ТТ尔,OU=尔艾豆Т吉豆尔,O=Т开开尔吉尔吉开尔尔开豆艾豆Т艾尔开Т开开豆,L=Guangzhou,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1f:3e:53:d4:78:2e:3c:38:40:ee:d4:ba:66:28:9c:67:b3:1e:8d:c6:16:fc:f5:de:f3:cc:50:f9:0e:10:9b:9c
Signer

Actual PE Digest

1f:3e:53:d4:78:2e:3c:38:40:ee:d4:ba:66:28:9c:67:b3:1e:8d:c6:16:fc:f5:de:f3:cc:50:f9:0e:10:9b:9c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

52:e9:68:c0:67:99:e6:44:a2:ee:34:2c:90:dc:28:14Certificate

Extended Key Usages

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

1f:3e:53:d4:78:2e:3c:38:40:ee:d4:ba:66:28:9c:67:b3:1e:8d:c6:16:fc:f5:de:f3:cc:50:f9:0e:10:9b:9cSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 258KB - Virtual size: 258KB

.rsrc Size: 184KB - Virtual size: 183KB

.reloc Size: 512B - Virtual size: 12B

52:e9:68:c0:67:99:e6:44:a2:ee:34:2c:90:dc:28:14
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

1f:3e:53:d4:78:2e:3c:38:40:ee:d4:ba:66:28:9c:67:b3:1e:8d:c6:16:fc:f5:de:f3:cc:50:f9:0e:10:9b:9c
Signer

.text
Size: 258KB - Virtual size: 258KB

.rsrc
Size: 184KB - Virtual size: 183KB

.reloc
Size: 512B - Virtual size: 12B