JaffaCakes118_badced65144a2ba910dcbf8b8c1324f1da7dab624500969731f9210880208bfa

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_badced65144a2ba910dcbf8b8c1324f1da7dab624500969731f9210880208bfa
Size

727.2MB
MD5

3f2771d50d1b137519fe3ece78e812d8
SHA1

8c7ed56006620cd81f76c4cf9db16b895b7a6c46
SHA256

badced65144a2ba910dcbf8b8c1324f1da7dab624500969731f9210880208bfa
SHA512

2cfe3edd52ae342bfeecac4c49193d8f3969e18adfe847f887910256e776ded073980463012139e7b2cc199e877efa967335633f9557c20d7333a06245a879e9
SSDEEP

196608:gIAd/GCkjWwZ4k8hbhijp4c5xkTWFhTZXT7DMsfh9N4:gI2/GHW13hEjp40xt1ZHgC9a

Score

1^/10

Malware Config

Signatures

Files

JaffaCakes118_badced65144a2ba910dcbf8b8c1324f1da7dab624500969731f9210880208bfa
.exe windows:6 windows x86 arch:x86

0901266657d602fff9c7d9a865574642

Code Sign

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:f0:56:10:77:23:04:69:76:65:3e:c4:57:1e:8a:a4
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-02-2021 00:00

Not After

03-02-2024 23:59

Subject

CN=MiniTool Software Limited,O=MiniTool Software Limited,STREET=Kowloon+STREET=Harbour City\, 5 Canton Road\, Tsim Sha Tsui+STREET=Suite 820\, 8 Floor\, Ocean Centre,L=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ed:6c:da:a7:c4:b8:5c:c0:60:e9:88:bd:35:4d:3e:aa:7b:07:06:c4:b3:b8:23:9a:9e:86:71:22:67:fb:5e:19
Signer

Actual PE Digest

ed:6c:da:a7:c4:b8:5c:c0:60:e9:88:bd:35:4d:3e:aa:7b:07:06:c4:b3:b8:23:9a:9e:86:71:22:67:fb:5e:19

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

CharUpperBuffW

Sections

.text
Size: - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.? C
Size: - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.A+Y
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0tv
Size: 6.8MB - Virtual size: 6.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 402KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0901266657d602fff9c7d9a865574642

Code Sign

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

3d:f0:56:10:77:23:04:69:76:65:3e:c4:57:1e:8a:a4Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

ed:6c:da:a7:c4:b8:5c:c0:60:e9:88:bd:35:4d:3e:aa:7b:07:06:c4:b3:b8:23:9a:9e:86:71:22:67:fb:5e:19Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: - Virtual size: 39KB

.rdata Size: - Virtual size: 5KB

.data Size: - Virtual size: 3KB

.CRT Size: - Virtual size: 4B

.? C Size: - Virtual size: 3.8MB

.A+Y Size: 1024B - Virtual size: 872B

.0tv Size: 6.8MB - Virtual size: 6.8MB

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 402KB - Virtual size: 402KB

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

3d:f0:56:10:77:23:04:69:76:65:3e:c4:57:1e:8a:a4
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

ed:6c:da:a7:c4:b8:5c:c0:60:e9:88:bd:35:4d:3e:aa:7b:07:06:c4:b3:b8:23:9a:9e:86:71:22:67:fb:5e:19
Signer

.text
Size: - Virtual size: 39KB

.rdata
Size: - Virtual size: 5KB

.data
Size: - Virtual size: 3KB

.CRT
Size: - Virtual size: 4B

.? C
Size: - Virtual size: 3.8MB

.A+Y
Size: 1024B - Virtual size: 872B

.0tv
Size: 6.8MB - Virtual size: 6.8MB

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 402KB - Virtual size: 402KB