371fc741367cc029024f644d2bb4bbac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

371fc741367cc029024f644d2bb4bbac_JaffaCakes118
Size

38KB
MD5

371fc741367cc029024f644d2bb4bbac
SHA1

3b6f6a309d26f7c709dbfcfda27f49d4fc6c7434
SHA256

ef356eecc335381a2bff63f66ad176820e5a8cc7428b41f6cc12f8d9945dc505
SHA512

38ed90cd4d1cc399ac04c3e21417664dd5a5bd5dc708866cffba74eb79a505b22152c7181dc8041cfd6f13fd63b7b30a08a222c2fdc4fa6d3e093e110b21e3dd
SSDEEP

768:Y74Re3bva4jYxS43ieGkIQ91tNUjg6CbI2MnHh3Iw0Pnz:g4cr1YY4SeGZm1YE6N3B3Ipz

Score

1^/10

Malware Config

Signatures

Files

371fc741367cc029024f644d2bb4bbac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Code Sign

6c:97:89:da:31:52:25:9f:48:2b:ca:f6:94:55:25:a4
Certificate

Issuer

CN=Root Agency

Not Before

01/04/2009, 21:06

Not After

31/12/2039, 23:59

Subject

CN=Microsoft Windows,O=Microsoft Windows,1.2.840.113549.1.9.1=#0c0f726f6f744077696e646f772e636f6d

02:35:8f
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

13/02/2006, 15:40

Not After

11/02/2016, 15:40

Subject

CN=GeoTrust TrustCenter Authenticode Timestamp I,OU=GeoTrust TrustCenter Timestamp,O=GeoTrust Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.Upack
Size: 44B - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE