JaffaCakes118_0d28bffbc18947f5b5948a9a2377fb54ba1b37117c0bbee9e51fdeeab5805608

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_0d28bffbc18947f5b5948a9a2377fb54ba1b37117c0bbee9e51fdeeab5805608
Size

156KB
MD5

f2e9963a3026deeaf56d9aacdfb391bc
SHA1

03ea59e4a5303040b686fe63714206d3f06defb0
SHA256

0d28bffbc18947f5b5948a9a2377fb54ba1b37117c0bbee9e51fdeeab5805608
SHA512

e7aa18431483d1ef6a34a9391db57269e6bec2d25923db7b9f9615875badf28c873a646b08e9444f2cf3a8227b8770326f899f858bfcb5d395a59717f5950135
SSDEEP

3072:fepB2onsVz4ccWtx9R+u3Kpd0Y9Rg+EnpF2+REZh:fUDsZB7spuY9Rg+wzw

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_0d28bffbc18947f5b5948a9a2377fb54ba1b37117c0bbee9e51fdeeab5805608
.zip

Password: infected
53884f3120767d42dabef87b63e0d6b9cbb3be425f842c458d95d2b017dbe5c0
.dll regsvr32 windows:4 windows x86 arch:x86

Code Sign

33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:39

Not After

03-03-2021 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9e:9d:8f:4d:54:74:5f:65:59:9d:c9:b0:d1:25:55:03:5b:ae:21:cc:65:e0:aa:e9:d1:d1:69:53:a4:da:23:da
Signer

Actual PE Digest

9e:9d:8f:4d:54:74:5f:65:59:9d:c9:b0:d1:25:55:03:5b:ae:21:cc:65:e0:aa:e9:d1:d1:69:53:a4:da:23:da

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllRegisterServer

Sections

.text
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jacamer
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.retecio
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.raptury
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 33KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lateriv
Size: 512B - Virtual size: 304B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.moronit
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nonteac
Size: 512B - Virtual size: 330B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g
Size: 512B - Virtual size: 467B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qui
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 79KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Code Sign

33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

9e:9d:8f:4d:54:74:5f:65:59:9d:c9:b0:d1:25:55:03:5b:ae:21:cc:65:e0:aa:e9:d1:d1:69:53:a4:da:23:daSigner

Headers

File Characteristics

Exports

Exports

Sections

.text Size: 154KB - Virtual size: 154KB

Size: 512B - Virtual size: 56B

.jacamer Size: 512B - Virtual size: 12KB

.retecio Size: 512B - Virtual size: 12KB

.raptury Size: 512B - Virtual size: 12KB

.rdata Size: 33KB - Virtual size: 45KB

.lateriv Size: 512B - Virtual size: 304B

.moronit Size: 512B - Virtual size: 12KB

.nonteac Size: 512B - Virtual size: 330B

.g Size: 512B - Virtual size: 467B

.qui Size: 512B - Virtual size: 434B

.data Size: 79KB - Virtual size: 91KB

.rsrc Size: 1024B - Virtual size: 608B

.reloc Size: 6KB - Virtual size: 6KB

33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

9e:9d:8f:4d:54:74:5f:65:59:9d:c9:b0:d1:25:55:03:5b:ae:21:cc:65:e0:aa:e9:d1:d1:69:53:a4:da:23:da
Signer

.text
Size: 154KB - Virtual size: 154KB

.jacamer
Size: 512B - Virtual size: 12KB

.retecio
Size: 512B - Virtual size: 12KB

.raptury
Size: 512B - Virtual size: 12KB

.rdata
Size: 33KB - Virtual size: 45KB

.lateriv
Size: 512B - Virtual size: 304B

.moronit
Size: 512B - Virtual size: 12KB

.nonteac
Size: 512B - Virtual size: 330B

.g
Size: 512B - Virtual size: 467B

.qui
Size: 512B - Virtual size: 434B

.data
Size: 79KB - Virtual size: 91KB

.rsrc
Size: 1024B - Virtual size: 608B

.reloc
Size: 6KB - Virtual size: 6KB