JaffaCakes118_22ced8b16c6dc02cb7556a95112a3cd070983f455688039e0a65a88d1053d319

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_22ced8b16c6dc02cb7556a95112a3cd070983f455688039e0a65a88d1053d319
Size

787KB
MD5

b3193c102b6c328b8fea5889da929d5a
SHA1

ff87d1921436f849a95d9b0d9f7956e82e400882
SHA256

22ced8b16c6dc02cb7556a95112a3cd070983f455688039e0a65a88d1053d319
SHA512

1471931bec9a8ff2c0fb1b15841af639519e99e33d59bad7eb46edd57ed05204371329e448185b81824e473dd3358862e8626176b69f7ae32251c61dffd25592
SSDEEP

24576:lXRd5ZZ0WeqLkzjF+4LZ0WelLkzjF+4MLkzjF+4jZ9:JRd5ZZ0WeqLkzjF5Z0WelLkzjFCLkzjn

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_22ced8b16c6dc02cb7556a95112a3cd070983f455688039e0a65a88d1053d319
.exe windows:1 windows x86 arch:x86

Code Sign

34:99:10:fc:e9:8a:6b:9f:46:fb:58:1f:bb:20:ee:ca
Certificate

Issuer

CN=Eldon Tyrell,1.2.840.113549.1.9.1=#0c1c656c646f6e2e747972656c6c40747972656c6c2d636f72702e636f6d

Not Before

30-03-2022 08:15

Not After

30-03-2023 08:35

Subject

CN=Eldon Tyrell,1.2.840.113549.1.9.1=#0c1c656c646f6e2e747972656c6c40747972656c6c2d636f72702e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

e7:22:47:df:81:0e:45:33:87:10:e2:7f:9f:4e:c8:02:b4:11:ac:fe:9f:be:7c:0a:82:5c:cf:6a:1c:62:c4:c6
Signer

Actual PE Digest

e7:22:47:df:81:0e:45:33:87:10:e2:7f:9f:4e:c8:02:b4:11:ac:fe:9f:be:7c:0a:82:5c:cf:6a:1c:62:c4:c6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.grrr
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.00cfg
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.debug
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

34:99:10:fc:e9:8a:6b:9f:46:fb:58:1f:bb:20:ee:caCertificate

Extended Key Usages

Key Usages

e7:22:47:df:81:0e:45:33:87:10:e2:7f:9f:4e:c8:02:b4:11:ac:fe:9f:be:7c:0a:82:5c:cf:6a:1c:62:c4:c6Signer

Headers

DLL Characteristics

File Characteristics

Sections

.code Size: 38KB - Virtual size: 38KB

.rdata Size: 62KB - Virtual size: 61KB

.data Size: 4KB - Virtual size: 4KB

.grrr Size: 50KB - Virtual size: 50KB

.reloc Size: 1KB - Virtual size: 1KB

.00cfg Size: 37KB - Virtual size: 37KB

.bss Size: 165KB - Virtual size: 165KB

.bss Size: 37KB - Virtual size: 37KB

.ndata Size: 165KB - Virtual size: 165KB

.bss Size: 37KB - Virtual size: 37KB

.debug Size: 37KB - Virtual size: 37KB

.text Size: 4KB - Virtual size: 4KB

.bss Size: 146KB - Virtual size: 146KB

34:99:10:fc:e9:8a:6b:9f:46:fb:58:1f:bb:20:ee:ca
Certificate

e7:22:47:df:81:0e:45:33:87:10:e2:7f:9f:4e:c8:02:b4:11:ac:fe:9f:be:7c:0a:82:5c:cf:6a:1c:62:c4:c6
Signer

.code
Size: 38KB - Virtual size: 38KB

.rdata
Size: 62KB - Virtual size: 61KB

.data
Size: 4KB - Virtual size: 4KB

.grrr
Size: 50KB - Virtual size: 50KB

.reloc
Size: 1KB - Virtual size: 1KB

.00cfg
Size: 37KB - Virtual size: 37KB

.bss
Size: 165KB - Virtual size: 165KB

.bss
Size: 37KB - Virtual size: 37KB

.ndata
Size: 165KB - Virtual size: 165KB

.bss
Size: 37KB - Virtual size: 37KB

.debug
Size: 37KB - Virtual size: 37KB

.text
Size: 4KB - Virtual size: 4KB

.bss
Size: 146KB - Virtual size: 146KB