165f83e44fe61907d86c4ffb76c5f191_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

165f83e44fe61907d86c4ffb76c5f191_JaffaCakes118
Size

4.2MB
MD5

165f83e44fe61907d86c4ffb76c5f191
SHA1

ea17076405f70ce75596d77e5f24b62d4da0884d
SHA256

684b6db3283c9158fa71439fe8ce6a5a4a9fa7209ecb90e9cb72ea21533a4f53
SHA512

19bb4ccc026127eb82a5a52d1e0ac85c601a2514745a3c08210203c538f2989944c68fbd38dd4f88b7e3f8e3c32c6be3df350895906ef0502680ca64e7db3bf5
SSDEEP

98304:0E1QqPosY7bm5Ly+DPKFcnSUi9SMw6ig/sjYRsjW0Tg8f+z:4Kjz0+zKFsi99RiAsjYKjWYg8f+z

Score

1^/10

Malware Config

Signatures

Files

165f83e44fe61907d86c4ffb76c5f191_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Code Sign

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

13/04/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:7a:04:4d:98:75:ab:52:00:31:48:88:c3:9c:54:86:ef
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

27/10/2011, 15:26

Not After

27/10/2013, 15:26

Subject

CN=Tuto4PC.com,O=Tuto4PC.com,L=Paris,ST=Ile-de-france,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

20:d4:f6:b8:ab:25:c3:71:11:a1:b0:b1:c1:93:11:2b:0c:c3:4c:1d
Signer

Actual PE Digest

20:d4:f6:b8:ab:25:c3:71:11:a1:b0:b1:c1:93:11:2b:0c:c3:4c:1d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

04:00:00:00:00:01:2f:4e:e1:35:5cCertificate

Extended Key Usages

Key Usages

11:21:7a:04:4d:98:75:ab:52:00:31:48:88:c3:9c:54:86:efCertificate

Extended Key Usages

Key Usages

20:d4:f6:b8:ab:25:c3:71:11:a1:b0:b1:c1:93:11:2b:0c:c3:4c:1dSigner

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 37KB - Virtual size: 36KB

DATA Size: 1024B - Virtual size: 588B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 11KB - Virtual size: 11KB

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

11:21:7a:04:4d:98:75:ab:52:00:31:48:88:c3:9c:54:86:ef
Certificate

20:d4:f6:b8:ab:25:c3:71:11:a1:b0:b1:c1:93:11:2b:0c:c3:4c:1d
Signer

CODE
Size: 37KB - Virtual size: 36KB

DATA
Size: 1024B - Virtual size: 588B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 11KB - Virtual size: 11KB