JaffaCakes118_1299c1ba2aae7a7b384ddd1253faadc4ca0511f090310319e5af908d821ec237

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_1299c1ba2aae7a7b384ddd1253faadc4ca0511f090310319e5af908d821ec237
Size

726.8MB
MD5

aaa21f68e182873dfa6ef15afae9fcf5
SHA1

00a63fa40078aa87494fcd221833d23fddfedd77
SHA256

1299c1ba2aae7a7b384ddd1253faadc4ca0511f090310319e5af908d821ec237
SHA512

a0f531f821ef96007a93c489302b1cc90270f6896f8214cc1c251907477a98658b3cb6a8cd1b42a678fee55279f70fb384d7f49c0441738512a8868ba7e6b289
SSDEEP

98304:8tUF1TU0GOWTMYXeeoTiReaJaVynrr7DSZkVdADtMpCoJYNlRY9cAyuePdJyuI:8SFC0GjTMde/xoarr7+ZkVCgjY6fR

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_1299c1ba2aae7a7b384ddd1253faadc4ca0511f090310319e5af908d821ec237
.exe windows:6 windows x86 arch:x86

0901266657d602fff9c7d9a865574642

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:66:ad:fa:17:63:89:d9:b4:30:1a:c8:7e:fd:6a:96
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

14-04-2021 00:00

Not After

16-04-2024 23:59

Subject

CN=Nvidia Corporation,OU=IT-MIS,O=Nvidia Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

38:63:de:f8
Certificate

Issuer

CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

Not Before

24-12-1999 17:50

Not After

24-07-2029 14:15

Subject

CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:da:13:ff:00:00:00:00:51:ce:0d:f7
Certificate

Issuer

CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

Not Before

22-07-2015 19:02

Not After

22-06-2029 19:32

Subject

CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

8d:ce:15:f3:a7:94:c5:87:00:00:00:00:55:92:33:f4
Certificate

Issuer

CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

22-07-2020 15:33

Not After

29-12-2030 16:29

Subject

CN=Entrust Timestamp Authority - TSA1,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

40:80:f6:47:26:6e:2f:6a:85:27:f9:42:80:ad:c5:7c:2f:91:a7:dc:7f:41:75:84:84:29:4d:86:93:e3:a6:68
Signer

Actual PE Digest

40:80:f6:47:26:6e:2f:6a:85:27:f9:42:80:ad:c5:7c:2f:91:a7:dc:7f:41:75:84:84:29:4d:86:93:e3:a6:68

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

CharUpperBuffW

Sections

.text
Size: - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.N8>
Size: - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Bsk
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.\JI
Size: 6.8MB - Virtual size: 6.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0901266657d602fff9c7d9a865574642

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

02:66:ad:fa:17:63:89:d9:b4:30:1a:c8:7e:fd:6a:96Certificate

Extended Key Usages

Key Usages

38:63:de:f8Certificate

Key Usages

58:da:13:ff:00:00:00:00:51:ce:0d:f7Certificate

Extended Key Usages

Key Usages

8d:ce:15:f3:a7:94:c5:87:00:00:00:00:55:92:33:f4Certificate

Extended Key Usages

Key Usages

40:80:f6:47:26:6e:2f:6a:85:27:f9:42:80:ad:c5:7c:2f:91:a7:dc:7f:41:75:84:84:29:4d:86:93:e3:a6:68Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: - Virtual size: 39KB

.rdata Size: - Virtual size: 5KB

.data Size: - Virtual size: 3KB

.CRT Size: - Virtual size: 4B

.N8> Size: - Virtual size: 3.8MB

.Bsk Size: 1024B - Virtual size: 872B

.\JI Size: 6.8MB - Virtual size: 6.8MB

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 6KB - Virtual size: 5KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

02:66:ad:fa:17:63:89:d9:b4:30:1a:c8:7e:fd:6a:96
Certificate

38:63:de:f8
Certificate

58:da:13:ff:00:00:00:00:51:ce:0d:f7
Certificate

8d:ce:15:f3:a7:94:c5:87:00:00:00:00:55:92:33:f4
Certificate

40:80:f6:47:26:6e:2f:6a:85:27:f9:42:80:ad:c5:7c:2f:91:a7:dc:7f:41:75:84:84:29:4d:86:93:e3:a6:68
Signer

.text
Size: - Virtual size: 39KB

.rdata
Size: - Virtual size: 5KB

.data
Size: - Virtual size: 3KB

.CRT
Size: - Virtual size: 4B

.N8>
Size: - Virtual size: 3.8MB

.Bsk
Size: 1024B - Virtual size: 872B

.\JI
Size: 6.8MB - Virtual size: 6.8MB

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 6KB - Virtual size: 5KB