ef0370c80915653fe001b5c9682bde37_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ef0370c80915653fe001b5c9682bde37_JaffaCakes118
Size

1.3MB
MD5

ef0370c80915653fe001b5c9682bde37
SHA1

98d60720102caa4e52ba46ef79e6006484908fe4
SHA256

40480036363a57a125f0ba8d78005327b8e3f7d496d486961e75bf67089034bc
SHA512

32e37902ef53f5ba1d7c274a4ff03693d94a5504f4396ae143e90c5cd124b989a62ce3df2c738f0f7ff62350df8d3d3cc5467b6025d032411ee054ab7d29e72d
SSDEEP

24576:F1Eb+vbxtTlUfP4fzFmVzDrltuJWqqnL0FChMy14Fu/xNiXkrQV7CVhPL+MMXF3W:F1Ufr

Score

1^/10

Malware Config

Signatures

Files

ef0370c80915653fe001b5c9682bde37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

e1:ed:9b:8d:e5:c1:37:00
Certificate

Issuer

CN=ChannelDispatcherBase

Not Before

11-08-2021 11:00

Not After

12-08-2022 07:00

Subject

CN=ChannelDispatcherBase

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e1:ed:9b:8d:e5:c1:37:00
Certificate

Issuer

CN=ChannelDispatcherBase

Not Before

11-08-2021 11:00

Not After

12-08-2022 07:00

Subject

CN=ChannelDispatcherBase

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ba:a1:fd:c9:4a:68:b8:27:b7:b7:df:7b:47:3e:45:48:7e:77:5b:5e:bf:30:a3:65:3d:87:b0:ac:f2:d5:9b:87
Signer

Actual PE Digest

ba:a1:fd:c9:4a:68:b8:27:b7:b7:df:7b:47:3e:45:48:7e:77:5b:5e:bf:30:a3:65:3d:87:b0:ac:f2:d5:9b:87

Digest Algorithm

sha256

PE Digest Matches

true

93:10:93:22:e9:ca:c5:b6:ae:5b:8d:2a:d9:a7:86:94:52:5e:fa:40
Signer

Actual PE Digest

93:10:93:22:e9:ca:c5:b6:ae:5b:8d:2a:d9:a7:86:94:52:5e:fa:40

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

e1:ed:9b:8d:e5:c1:37:00Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

e1:ed:9b:8d:e5:c1:37:00Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

ba:a1:fd:c9:4a:68:b8:27:b7:b7:df:7b:47:3e:45:48:7e:77:5b:5e:bf:30:a3:65:3d:87:b0:ac:f2:d5:9b:87Signer

93:10:93:22:e9:ca:c5:b6:ae:5b:8d:2a:d9:a7:86:94:52:5e:fa:40Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rsrc Size: 44KB - Virtual size: 43KB

.reloc Size: 512B - Virtual size: 12B

e1:ed:9b:8d:e5:c1:37:00
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

e1:ed:9b:8d:e5:c1:37:00
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

ba:a1:fd:c9:4a:68:b8:27:b7:b7:df:7b:47:3e:45:48:7e:77:5b:5e:bf:30:a3:65:3d:87:b0:ac:f2:d5:9b:87
Signer

93:10:93:22:e9:ca:c5:b6:ae:5b:8d:2a:d9:a7:86:94:52:5e:fa:40
Signer

.text
Size: 1.2MB - Virtual size: 1.2MB

.rsrc
Size: 44KB - Virtual size: 43KB

.reloc
Size: 512B - Virtual size: 12B