JaffaCakes118_67f9eb748f2a4adcb4b1eac7f7af56eae2de09fed60ac73dc0b71132cf0df099

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_67f9eb748f2a4adcb4b1eac7f7af56eae2de09fed60ac73dc0b71132cf0df099
Size

310KB
MD5

3559655137815fbc9df3f7af6d356fe4
SHA1

eefe1477b96d0dccb39e7b65d82a80d87890acec
SHA256

67f9eb748f2a4adcb4b1eac7f7af56eae2de09fed60ac73dc0b71132cf0df099
SHA512

2be4928e4639cccf5dbafebf6f300f66e77721bc3a953d58fea2d68da911c8dc07322052834f6f800a025d395f489d2cab9b7e7119eba7d724bf18f406cc11ee
SSDEEP

6144:+GQy39ipZRSJplvyD/q1WSSJYXb4sbb7ah+Zjhlw86RhEMoixkBQvJCBamR:oy398SJ3vyLjSRVuh+ZjTw86RW5iyBQ2

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_67f9eb748f2a4adcb4b1eac7f7af56eae2de09fed60ac73dc0b71132cf0df099
.zip

Password: infected
ItFoV.bin
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:23:a2:e6:c2:8b:43:07:7b:51:b0:35:33:d8:24:76
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03-06-2019 00:00

Not After

10-06-2020 12:00

Subject

SERIALNUMBER=11771157,CN=Trader Direct Limited,O=Trader Direct Limited,L=Mattishall,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:23:a2:e6:c2:8b:43:07:7b:51:b0:35:33:d8:24:76
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03-06-2019 00:00

Not After

10-06-2020 12:00

Subject

SERIALNUMBER=11771157,CN=Trader Direct Limited,O=Trader Direct Limited,L=Mattishall,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02-05-2019 00:00

Not After

01-08-2030 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

31:60:f7:f1:73:d8:f0:e3:9a:5d:98:eb:f0:61:23:4f:a8:3a:ed:88:08:25:72:52:89:0f:43:7c:64:8a:40:b5
Signer

Actual PE Digest

31:60:f7:f1:73:d8:f0:e3:9a:5d:98:eb:f0:61:23:4f:a8:3a:ed:88:08:25:72:52:89:0f:43:7c:64:8a:40:b5

Digest Algorithm

sha256

PE Digest Matches

false

4a:b1:17:52:2e:43:49:ee:8c:eb:09:4b:4f:0b:d5:1d:e6:cc:16:13
Signer

Actual PE Digest

4a:b1:17:52:2e:43:49:ee:8c:eb:09:4b:4f:0b:d5:1d:e6:cc:16:13

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 330KB - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

03:23:a2:e6:c2:8b:43:07:7b:51:b0:35:33:d8:24:76Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

03:23:a2:e6:c2:8b:43:07:7b:51:b0:35:33:d8:24:76Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

31:60:f7:f1:73:d8:f0:e3:9a:5d:98:eb:f0:61:23:4f:a8:3a:ed:88:08:25:72:52:89:0f:43:7c:64:8a:40:b5Signer

4a:b1:17:52:2e:43:49:ee:8c:eb:09:4b:4f:0b:d5:1d:e6:cc:16:13Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 330KB - Virtual size: 329KB

.rsrc Size: 314KB - Virtual size: 314KB

.reloc Size: 512B - Virtual size: 12B

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

03:23:a2:e6:c2:8b:43:07:7b:51:b0:35:33:d8:24:76
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

03:23:a2:e6:c2:8b:43:07:7b:51:b0:35:33:d8:24:76
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

31:60:f7:f1:73:d8:f0:e3:9a:5d:98:eb:f0:61:23:4f:a8:3a:ed:88:08:25:72:52:89:0f:43:7c:64:8a:40:b5
Signer

4a:b1:17:52:2e:43:49:ee:8c:eb:09:4b:4f:0b:d5:1d:e6:cc:16:13
Signer

.text
Size: 330KB - Virtual size: 329KB

.rsrc
Size: 314KB - Virtual size: 314KB

.reloc
Size: 512B - Virtual size: 12B