026e27ba5274bfcb92325cef82b805b9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

026e27ba5274bfcb92325cef82b805b9_JaffaCakes118
Size

65KB
MD5

026e27ba5274bfcb92325cef82b805b9
SHA1

dd166b7fab1b27df62727b4f850397a22ddc0c78
SHA256

3950f8abceac9cdd7cf99244e74b281250be3245e2dbbe5eee7edd15b03bed78
SHA512

d2cb693601100db6d31e8dd1a3a2d2a8608953a6dc8ba7981bc1ba05be8a1376e66b1d6cc5135d4d28348d64018ffc3c4451ade37a6ed4fcf27efc0e1edcf2b1
SSDEEP

1536:StQXPGe9fmU98S4q2I9RZ/ZAGXe5mww72sdQVQsppfTUqYUdKbXRCLG2M:SKPGe9lKqV/ZFXLw02sdmQ07wjbRCLGZ

Score

1^/10

Malware Config

Signatures

Files

026e27ba5274bfcb92325cef82b805b9_JaffaCakes118
.zip
Lineage2.xDatEditor.1-4-9-0.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

14:3b:6e:42:d2:d6:3a:41:2a:5d:3d:b5:b2:da:c9:7d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

18/01/2018, 00:00

Not After

16/02/2021, 23:59

Subject

CN=WavePoint Co. Ltd.,O=WavePoint Co. Ltd.,L=St. Petersburg,ST=St. Petersburg,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22/07/2014, 00:00

Not After

21/07/2024, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

14:3b:6e:42:d2:d6:3a:41:2a:5d:3d:b5:b2:da:c9:7d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

18/01/2018, 00:00

Not After

16/02/2021, 23:59

Subject

CN=WavePoint Co. Ltd.,O=WavePoint Co. Ltd.,L=St. Petersburg,ST=St. Petersburg,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22/07/2014, 00:00

Not After

21/07/2024, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:62:41:56:1b:24:8b:ac:ad:f2:ac:50:30:c2:21:ac:1d:da:9d:e4:05:3b:6c:33:f8:a4:3d:fb:f2:21:fb:06
Signer

Actual PE Digest

0d:62:41:56:1b:24:8b:ac:ad:f2:ac:50:30:c2:21:ac:1d:da:9d:e4:05:3b:6c:33:f8:a4:3d:fb:f2:21:fb:06

Digest Algorithm

sha256

PE Digest Matches

true

b7:1a:91:61:81:e1:ba:f5:0b:92:73:1f:65:8a:ff:b2:86:03:88:23
Signer

Actual PE Digest

b7:1a:91:61:81:e1:ba:f5:0b:92:73:1f:65:8a:ff:b2:86:03:88:23

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

14:3b:6e:42:d2:d6:3a:41:2a:5d:3d:b5:b2:da:c9:7dCertificate

Extended Key Usages

Key Usages

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8Certificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

14:3b:6e:42:d2:d6:3a:41:2a:5d:3d:b5:b2:da:c9:7dCertificate

Extended Key Usages

Key Usages

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8Certificate

Extended Key Usages

Key Usages

0d:62:41:56:1b:24:8b:ac:ad:f2:ac:50:30:c2:21:ac:1d:da:9d:e4:05:3b:6c:33:f8:a4:3d:fb:f2:21:fb:06Signer

b7:1a:91:61:81:e1:ba:f5:0b:92:73:1f:65:8a:ff:b2:86:03:88:23Signer

Headers

File Characteristics

Imports

mscoree

Sections

.text Size: 83KB - Virtual size: 83KB

.rsrc Size: 36KB - Virtual size: 36KB

.reloc Size: 512B - Virtual size: 12B

14:3b:6e:42:d2:d6:3a:41:2a:5d:3d:b5:b2:da:c9:7d
Certificate

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

14:3b:6e:42:d2:d6:3a:41:2a:5d:3d:b5:b2:da:c9:7d
Certificate

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

0d:62:41:56:1b:24:8b:ac:ad:f2:ac:50:30:c2:21:ac:1d:da:9d:e4:05:3b:6c:33:f8:a4:3d:fb:f2:21:fb:06
Signer

b7:1a:91:61:81:e1:ba:f5:0b:92:73:1f:65:8a:ff:b2:86:03:88:23
Signer

.text
Size: 83KB - Virtual size: 83KB

.rsrc
Size: 36KB - Virtual size: 36KB

.reloc
Size: 512B - Virtual size: 12B