JaffaCakes118_cc68ff1ec1b1cec573289564b880089c67e15de6715f5f459f0812070c4f6051

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_cc68ff1ec1b1cec573289564b880089c67e15de6715f5f459f0812070c4f6051
Size

1.2MB
MD5

f7b1300a35c3e74769df8f8885c6771f
SHA1

67a76e2ac4ad8fd2454832f1d474ba6e0e3d9042
SHA256

cc68ff1ec1b1cec573289564b880089c67e15de6715f5f459f0812070c4f6051
SHA512

38ccca086ed7f4edbf05ebd8f18aee62265ea4c0304b6e8a15cd30fc3218ec813dca3fb8a01199a6a9fb8a77e2c49f1bf2d91866418a1646732d17d23a7d41a3
SSDEEP

24576:JYxzvF4EeVKowf2al+ocqJZKa7EWXlBd7FVjfH9XZH:J6xsKowf2asoLJp7EWlBd7FlfHJV

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_cc68ff1ec1b1cec573289564b880089c67e15de6715f5f459f0812070c4f6051
.7z

Password: infected
Proforma Invoice.exe
.exe windows:4 windows x86 arch:x86

Code Sign

33:00:00:02:31:32:34:cb:af:a8:ab:9a:4d:00:00:00:00:02:31
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-05-2019 21:24

Not After

02-05-2020 21:24

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

19:64:bc:b9:93:11:2a:4a:95:20:f4:a2:2a:8a:22:84:fe:07:64:f0:c9:85:e9:e8:85:de:77:9b:3d:3e:67:71
Signer

Actual PE Digest

19:64:bc:b9:93:11:2a:4a:95:20:f4:a2:2a:8a:22:84:fe:07:64:f0:c9:85:e9:e8:85:de:77:9b:3d:3e:67:71

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 677KB - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 331KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Code Sign

33:00:00:02:31:32:34:cb:af:a8:ab:9a:4d:00:00:00:00:02:31Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

19:64:bc:b9:93:11:2a:4a:95:20:f4:a2:2a:8a:22:84:fe:07:64:f0:c9:85:e9:e8:85:de:77:9b:3d:3e:67:71Signer

Headers

File Characteristics

Sections

CODE Size: 677KB - Virtual size: 676KB

DATA Size: 11KB - Virtual size: 10KB

BSS Size: - Virtual size: 4KB

.idata Size: 9KB - Virtual size: 9KB

.tls Size: - Virtual size: 64B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 48KB - Virtual size: 47KB

.rsrc Size: 331KB - Virtual size: 330KB

33:00:00:02:31:32:34:cb:af:a8:ab:9a:4d:00:00:00:00:02:31
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

19:64:bc:b9:93:11:2a:4a:95:20:f4:a2:2a:8a:22:84:fe:07:64:f0:c9:85:e9:e8:85:de:77:9b:3d:3e:67:71
Signer

CODE
Size: 677KB - Virtual size: 676KB

DATA
Size: 11KB - Virtual size: 10KB

BSS
Size: - Virtual size: 4KB

.idata
Size: 9KB - Virtual size: 9KB

.tls
Size: - Virtual size: 64B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 48KB - Virtual size: 47KB

.rsrc
Size: 331KB - Virtual size: 330KB