JaffaCakes118_3f50b89979ffff65668924c1b935cf655b8efc46d4c121ae8627a0474f1d9e0a

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_3f50b89979ffff65668924c1b935cf655b8efc46d4c121ae8627a0474f1d9e0a
Size

599KB
MD5

fd6d16ef09a96897604557faf17ac1f9
SHA1

8b702da8f8426af9f501ba546f273c2d5f79f75d
SHA256

3f50b89979ffff65668924c1b935cf655b8efc46d4c121ae8627a0474f1d9e0a
SHA512

d68c63366abcf5b19417d165e4b483cd660235e8ce1b4abaf943e1f2985d8c58f71a03da90c55dc73e4c95945baed3d78d23bda00122ee5bf230e43ef751f34e
SSDEEP

6144:brcj5kylPt7lBGughNrYjgKQsLbxUvTzbJ63hDQXQP2FD8nDDX1:bIRt/y+ebPJG0Xq24nn1

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_3f50b89979ffff65668924c1b935cf655b8efc46d4c121ae8627a0474f1d9e0a
.dll regsvr32 windows:4 windows x86 arch:x86

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

75:8f:5e:e8:26:3b:66:94:71:9d:84:34:eb:99:86:08
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

31-10-2007 00:00

Not After

24-11-2010 23:59

Subject

CN=Symantec Corporation,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Symantec Research Labs,O=Symantec Corporation,L=Santa Monica,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9a:69:af:3e:d8:0f:10:77:22:72:fe:2e:9d:6a:16:8f:c0:0d:6b:95
Signer

Actual PE Digest

9a:69:af:3e:d8:0f:10:77:22:72:fe:2e:9d:6a:16:8f:c0:0d:6b:95

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Thoraces
Obligable
Stippen
Unpalsied
Unpilled
Menticultural
Pseudosocialistic
Serpentiferous
Unreckon
Forestair
Churchful
Nondefaulting
Cytozoon
Canonicity
Coprophyte
Porismatical
Hyperdicrotism
Domitian
Crocard
Jewless
Solvsbergite
Sillyism
Pardalote
Thermometric
Myiosis
Albopruinose
Southerland
Lowerer
Bignoniad
Unmighty
DllRegisterServer
Pinioned
Affeir
Cerebellar
Lobulate
Ectrodactyly
Ringboned
Protraditional
Cyclesmith
Alevin
Luting
Undistinguishable
Distorted
Digitately
Uncured
DllUnregisterServer
Ofo
Scler
Octandrian
Portrayist
Poldavy
Prostatolith
Rustily
Dipteral
Outfit
Unhealthiness
Anaptyctical
Trestlewise
Puncher
Skilfish
Pollucite
Labara
Asclepius
Unimmaculate
Deamination
Angiospasm
Oxyhalide
Minimally
Hierodulic
Serenissime
Decagonal
Nummulite

Sections

.rdata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 209KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 374KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

75:8f:5e:e8:26:3b:66:94:71:9d:84:34:eb:99:86:08Certificate

Extended Key Usages

Key Usages

9a:69:af:3e:d8:0f:10:77:22:72:fe:2e:9d:6a:16:8f:c0:0d:6b:95Signer

Headers

File Characteristics

Exports

Exports

Sections

.rdata Size: 512B - Virtual size: 456B

.text Size: 209KB - Virtual size: 273KB

Size: 2KB - Virtual size: 1KB

.rsrc Size: 374KB - Virtual size: 373KB

.reloc Size: 4KB - Virtual size: 3KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

75:8f:5e:e8:26:3b:66:94:71:9d:84:34:eb:99:86:08
Certificate

9a:69:af:3e:d8:0f:10:77:22:72:fe:2e:9d:6a:16:8f:c0:0d:6b:95
Signer

.rdata
Size: 512B - Virtual size: 456B

.text
Size: 209KB - Virtual size: 273KB

.rsrc
Size: 374KB - Virtual size: 373KB

.reloc
Size: 4KB - Virtual size: 3KB