9d09dc87f864d58294a01108b5fefdc0_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

9d09dc87f864d58294a01108b5fefdc0_JaffaCakes118
Size

475KB
MD5

9d09dc87f864d58294a01108b5fefdc0
SHA1

522fd81fd14e25381aaa0834fb9dbf7420f823b5
SHA256

0f0a5dcbb18f1dc67dd1f75b5f2a98f60d7913b35440d9f7533e3f6582ca9937
SHA512

d988688dd7af056bb0fd554ca95468fe83b4182d70120fa5d60ed1d744baed3a389c312fda5d912b37c60122a6b80a9278908fe80cb4054caf648f5ea7683801
SSDEEP

12288:iHg/jl0AZD/G2iN4amYwQb9OYyp9osPbx3:bjGAtG1FvfyjosPbx3

Score

1^/10

Malware Config

Signatures

Files

9d09dc87f864d58294a01108b5fefdc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

01:27:86:dc:a3:04:91:1d
Certificate

Issuer

CN=Signature

Not Before

12-08-2021 08:00

Not After

13-08-2022 07:00

Subject

CN=Signature

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

01:27:86:dc:a3:04:91:1d
Certificate

Issuer

CN=Signature

Not Before

12-08-2021 08:00

Not After

13-08-2022 07:00

Subject

CN=Signature

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:87:22:92:e5:85:32:da:1c:34:b4:c7:8e:29:78:71:3b:e8:f1:1d:b4:fc:2b:9a:15:97:3d:00:42:f5:e6:7c
Signer

Actual PE Digest

0f:87:22:92:e5:85:32:da:1c:34:b4:c7:8e:29:78:71:3b:e8:f1:1d:b4:fc:2b:9a:15:97:3d:00:42:f5:e6:7c

Digest Algorithm

sha256

PE Digest Matches

true

54:5c:04:21:ed:a4:a0:3d:94:2c:fe:00:12:c3:ab:fa:6a:59:68:b4
Signer

Actual PE Digest

54:5c:04:21:ed:a4:a0:3d:94:2c:fe:00:12:c3:ab:fa:6a:59:68:b4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 420KB - Virtual size: 419KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

01:27:86:dc:a3:04:91:1dCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

01:27:86:dc:a3:04:91:1dCertificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

0f:87:22:92:e5:85:32:da:1c:34:b4:c7:8e:29:78:71:3b:e8:f1:1d:b4:fc:2b:9a:15:97:3d:00:42:f5:e6:7cSigner

54:5c:04:21:ed:a4:a0:3d:94:2c:fe:00:12:c3:ab:fa:6a:59:68:b4Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 420KB - Virtual size: 419KB

.rsrc Size: 43KB - Virtual size: 42KB

.reloc Size: 512B - Virtual size: 12B

01:27:86:dc:a3:04:91:1d
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

01:27:86:dc:a3:04:91:1d
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

0f:87:22:92:e5:85:32:da:1c:34:b4:c7:8e:29:78:71:3b:e8:f1:1d:b4:fc:2b:9a:15:97:3d:00:42:f5:e6:7c
Signer

54:5c:04:21:ed:a4:a0:3d:94:2c:fe:00:12:c3:ab:fa:6a:59:68:b4
Signer

.text
Size: 420KB - Virtual size: 419KB

.rsrc
Size: 43KB - Virtual size: 42KB

.reloc
Size: 512B - Virtual size: 12B