30ba71a350395f5fd8a4ffedf761c8fd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

30ba71a350395f5fd8a4ffedf761c8fd_JaffaCakes118
Size

2.2MB
MD5

30ba71a350395f5fd8a4ffedf761c8fd
SHA1

75f3f8c94bbf7175d00070d4332188d7ee26a71d
SHA256

461d7c57a9a8ec58b953484718928ee62093ef9992c2c4b50bab5d14c09f53cc
SHA512

035eeb8711ed42d3a23dae89bfe9f9bd8992a0450f53e1e01cd4dbd79b97c97e5bb218d555720c0611e0f416223600f1c0b80df17fa61f13141de8c2ac990378
SSDEEP

49152:eZt7MfGNLRTrCKFz03XPhr+NQXDUIcHQi+JG5L7JZkc4T:eZtgePCKREXPEQXwIcQibEVT

Score

1^/10

Malware Config

Signatures

Files

30ba71a350395f5fd8a4ffedf761c8fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

0a:1e:86:79:32:44:ec:30:f4:65:37:e0:ae:0f:0f:b3
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

21/05/2012, 00:00

Not After

14/05/2013, 23:59

Subject

CN=Terra Firma Internet Consulting LTD,O=Terra Firma Internet Consulting LTD,L=Tel Aviv,ST=Israel,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18/10/2012, 14:38

Not After

20/05/2022, 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

19/05/2022, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:10:a8:3c:a0:63:37:8d:ba:48:e5:0b:be:3e:61:a0:cc:6a:8c:47
Signer

Actual PE Digest

47:10:a8:3c:a0:63:37:8d:ba:48:e5:0b:be:3e:61:a0:cc:6a:8c:47

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

0a:1e:86:79:32:44:ec:30:f4:65:37:e0:ae:0f:0f:b3Certificate

Extended Key Usages

02:3a:64Certificate

Extended Key Usages

Key Usages

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5eCertificate

Extended Key Usages

Key Usages

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:baCertificate

Extended Key Usages

Key Usages

47:10:a8:3c:a0:63:37:8d:ba:48:e5:0b:be:3e:61:a0:cc:6a:8c:47Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 512B - Virtual size: 12B

0a:1e:86:79:32:44:ec:30:f4:65:37:e0:ae:0f:0f:b3
Certificate

02:3a:64
Certificate

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

47:10:a8:3c:a0:63:37:8d:ba:48:e5:0b:be:3e:61:a0:cc:6a:8c:47
Signer

.text
Size: 2.1MB - Virtual size: 2.1MB

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 512B - Virtual size: 12B