JaffaCakes118_b1cb72d22b802417d7a6943bcb8a33f35eade92b0c376eee142e8af130f56f79

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_b1cb72d22b802417d7a6943bcb8a33f35eade92b0c376eee142e8af130f56f79
Size

7.6MB
MD5

8b2df4d709a6dfc41208b889d2a2fb20
SHA1

2046dad6877b3e766bec7010cdf5c9d5afee0e2b
SHA256

b1cb72d22b802417d7a6943bcb8a33f35eade92b0c376eee142e8af130f56f79
SHA512

ed0b2a7bb56b73ec46011787a0963378b665e29c44565930ac5e533e46735e3877e0cabc443ba24367dacb5de34fd3e2758072afbfd3fadc7e3bbd6ebe5e2497
SSDEEP

196608:PK8O9TbeJsABbRBsJEvrT8Wza9x5fE1XZLEcHPXgJ/:PK9ejBJij5s1pI/

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_b1cb72d22b802417d7a6943bcb8a33f35eade92b0c376eee142e8af130f56f79
.exe windows:6 windows x86 arch:x86

58435290dcc75b122641951f08ff6c21

Code Sign

15:30:44:9f:01:06:c6:8e:4a:b9:31:18:5b:86:3c:20
Certificate

Issuer

CN=鎰命鎰命鎰命鎰命鎰命鎰命鎰命鎰命鎰命鎰命鎰命鎰命鎰命鎰命鎰命

Not Before

06-09-2022 19:57

Not After

07-09-2032 19:57

Subject

CN=鎰命鎰命鎰命鎰命鎰命鎰命鎰命鎰命鎰命鎰命鎰命鎰命鎰命鎰命鎰命

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ec:60:c4:e2:60:39:ed:3a:dd:44:b4:e4:1e:cf:62:dc:5d:c5:eb:4b:67:ea:ee:5a:e0:66:61:cb:32:97:d3:9e
Signer

Actual PE Digest

ec:60:c4:e2:60:39:ed:3a:dd:44:b4:e4:1e:cf:62:dc:5d:c5:eb:4b:67:ea:ee:5a:e0:66:61:cb:32:97:d3:9e

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

wtsapi32

WTSSendMessageW

user32

GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW

Sections

.text
Size: - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

‡↓Æ
Size: - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

‡↓Æ
Size: 6.8MB - Virtual size: 6.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58435290dcc75b122641951f08ff6c21

Code Sign

15:30:44:9f:01:06:c6:8e:4a:b9:31:18:5b:86:3c:20Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

ec:60:c4:e2:60:39:ed:3a:dd:44:b4:e4:1e:cf:62:dc:5d:c5:eb:4b:67:ea:ee:5a:e0:66:61:cb:32:97:d3:9eSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

wtsapi32

user32

Sections

.text Size: - Virtual size: 41KB

.rdata Size: - Virtual size: 7KB

.data Size: - Virtual size: 1KB

.CRT Size: - Virtual size: 4B

‡↓Æ Size: - Virtual size: 5.4MB

‡↓Æ Size: 6.8MB - Virtual size: 6.8MB

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

15:30:44:9f:01:06:c6:8e:4a:b9:31:18:5b:86:3c:20
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

ec:60:c4:e2:60:39:ed:3a:dd:44:b4:e4:1e:cf:62:dc:5d:c5:eb:4b:67:ea:ee:5a:e0:66:61:cb:32:97:d3:9e
Signer

.text
Size: - Virtual size: 41KB

.rdata
Size: - Virtual size: 7KB

.data
Size: - Virtual size: 1KB

.CRT
Size: - Virtual size: 4B

‡↓Æ
Size: - Virtual size: 5.4MB

‡↓Æ
Size: 6.8MB - Virtual size: 6.8MB

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB