2db38c6d9323a510204668d1b7ab2dfa_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

2db38c6d9323a510204668d1b7ab2dfa_JaffaCakes118
Size

5.0MB
MD5

2db38c6d9323a510204668d1b7ab2dfa
SHA1

4065648d424bba572d96917f52750f0f5fb200d5
SHA256

80d59d7c45d10ca379f3191cf1a867dad5d00b8be684aea951f4206dd6a3573f
SHA512

d6167491e4f6232eaff151068a73ca37927cf0038d4fec13fc61a82bdaed57fee4a23e6208c3974fad15982e9cd7adcb5fa4b072055786f8a776a1e4c823da80
SSDEEP

98304:Yeq9s72ZXeCq13V7mkLRzMWzWvZ8jqNbY6Vtfp:YeqSyq7myR49vZ9bY6VP

Score

1^/10

Malware Config

Signatures

Files

2db38c6d9323a510204668d1b7ab2dfa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

e6:0b:2d:87:b8:eb:db:a7:e7:c4:83:a0:c6:18:52:02
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

20/05/2020, 00:00

Not After

19/08/2023, 23:59

Subject

CN=山东夜雨网络科技有限公司,O=山东夜雨网络科技有限公司,POSTALCODE=272200,STREET=任城区仙营街道兴唐大厦1902室,L=济宁市,ST=山东省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/03/2019, 00:00

Not After

31/12/2028, 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e6:0b:2d:87:b8:eb:db:a7:e7:c4:83:a0:c6:18:52:02
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

20/05/2020, 00:00

Not After

19/08/2023, 23:59

Subject

CN=山东夜雨网络科技有限公司,O=山东夜雨网络科技有限公司,POSTALCODE=272200,STREET=任城区仙营街道兴唐大厦1902室,L=济宁市,ST=山东省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/03/2019, 00:00

Not After

31/12/2028, 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9e:77:11:ce:e2:f3:09:fd:e8:19:da:16:d6:ac:2a:60:49:96:a7:0e:9e:43:60:08:1d:45:22:29:3a:6d:14:7d
Signer

Actual PE Digest

9e:77:11:ce:e2:f3:09:fd:e8:19:da:16:d6:ac:2a:60:49:96:a7:0e:9e:43:60:08:1d:45:22:29:3a:6d:14:7d

Digest Algorithm

sha256

PE Digest Matches

true

7b:a0:ae:89:32:9a:64:f6:99:45:bb:13:b2:3c:ea:c6:25:88:19:9c
Signer

Actual PE Digest

7b:a0:ae:89:32:9a:64:f6:99:45:bb:13:b2:3c:ea:c6:25:88:19:9c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

e6:0b:2d:87:b8:eb:db:a7:e7:c4:83:a0:c6:18:52:02Certificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

e6:0b:2d:87:b8:eb:db:a7:e7:c4:83:a0:c6:18:52:02Certificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

9e:77:11:ce:e2:f3:09:fd:e8:19:da:16:d6:ac:2a:60:49:96:a7:0e:9e:43:60:08:1d:45:22:29:3a:6d:14:7dSigner

7b:a0:ae:89:32:9a:64:f6:99:45:bb:13:b2:3c:ea:c6:25:88:19:9cSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 4.9MB - Virtual size: 4.9MB

.rsrc Size: 68KB - Virtual size: 68KB

.reloc Size: 512B - Virtual size: 12B

e6:0b:2d:87:b8:eb:db:a7:e7:c4:83:a0:c6:18:52:02
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

e6:0b:2d:87:b8:eb:db:a7:e7:c4:83:a0:c6:18:52:02
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

9e:77:11:ce:e2:f3:09:fd:e8:19:da:16:d6:ac:2a:60:49:96:a7:0e:9e:43:60:08:1d:45:22:29:3a:6d:14:7d
Signer

7b:a0:ae:89:32:9a:64:f6:99:45:bb:13:b2:3c:ea:c6:25:88:19:9c
Signer

.text
Size: 4.9MB - Virtual size: 4.9MB

.rsrc
Size: 68KB - Virtual size: 68KB

.reloc
Size: 512B - Virtual size: 12B