a7c95fa8e4dd4b0656cbc36e93de0312_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a7c95fa8e4dd4b0656cbc36e93de0312_JaffaCakes118
Size

1.2MB
MD5

a7c95fa8e4dd4b0656cbc36e93de0312
SHA1

bfc520e84a2441f0ce09823f4181d27cabe46fa2
SHA256

aa18b81ed85ea352506ca5c51db807f51011cb81df764d855f61b033d48fea14
SHA512

f85ef82e4bfab947204f46763424dd82f4bcb6659f1e2d8c8a246da0af395e3c5334dca99d433abc30fb1f70f76371cea367be268de91bbe0bdbf5750b53da82
SSDEEP

24576:H/OBazwaC3KTuiCOwDCARk6VTfZVt80+S6BJwjUduAtgrsBcO:RC664wD5TfZVt8M6mWtf

Score

1^/10

Malware Config

Signatures

Files

a7c95fa8e4dd4b0656cbc36e93de0312_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

22:f7:eb:7f:63:49:89:6d
Certificate

Issuer

CN=XhtmlConformanceMode

Not Before

07-08-2021 06:00

Not After

07-08-2026 07:00

Subject

CN=XhtmlConformanceMode

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

22:f7:eb:7f:63:49:89:6d
Certificate

Issuer

CN=XhtmlConformanceMode

Not Before

07-08-2021 06:00

Not After

07-08-2026 07:00

Subject

CN=XhtmlConformanceMode

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ee:7f:72:e6:9d:24:f6:92:51:96:af:74:52:8c:f4:53:82:5e:6b:ac:88:16:65:ad:c0:a3:06:c3:17:04:52:a0
Signer

Actual PE Digest

ee:7f:72:e6:9d:24:f6:92:51:96:af:74:52:8c:f4:53:82:5e:6b:ac:88:16:65:ad:c0:a3:06:c3:17:04:52:a0

Digest Algorithm

sha256

PE Digest Matches

true

7e:11:71:5b:09:59:ba:11:d6:71:05:87:d2:13:d6:d1:4c:cd:ba:db
Signer

Actual PE Digest

7e:11:71:5b:09:59:ba:11:d6:71:05:87:d2:13:d6:d1:4c:cd:ba:db

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

22:f7:eb:7f:63:49:89:6dCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

22:f7:eb:7f:63:49:89:6dCertificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

ee:7f:72:e6:9d:24:f6:92:51:96:af:74:52:8c:f4:53:82:5e:6b:ac:88:16:65:ad:c0:a3:06:c3:17:04:52:a0Signer

7e:11:71:5b:09:59:ba:11:d6:71:05:87:d2:13:d6:d1:4c:cd:ba:dbSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rsrc Size: 43KB - Virtual size: 43KB

.reloc Size: 512B - Virtual size: 12B

22:f7:eb:7f:63:49:89:6d
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

22:f7:eb:7f:63:49:89:6d
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

ee:7f:72:e6:9d:24:f6:92:51:96:af:74:52:8c:f4:53:82:5e:6b:ac:88:16:65:ad:c0:a3:06:c3:17:04:52:a0
Signer

7e:11:71:5b:09:59:ba:11:d6:71:05:87:d2:13:d6:d1:4c:cd:ba:db
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.rsrc
Size: 43KB - Virtual size: 43KB

.reloc
Size: 512B - Virtual size: 12B