570d821f4dbbaced91589426f430ff08_JaffaCakes118
- SHA256 cca041e34546ca2022b7abbd6958921809b717c0c399832f1a162412d3be07b9
Static task
static1
Behavioral task
behavioral1
Sample
Total order confirmation April 10 2017.exe
Resource
win7-20240221-en
windows7-x64
22 signatures
150 seconds
Behavioral task
behavioral2
Sample
Total order confirmation April 10 2017.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
21 signatures
150 seconds
General
- Target 570d821f4dbbaced91589426f430ff08_JaffaCakes118
- Size 1.1MB
- Sample240518-12acgaac41
- SHA256 cca041e34546ca2022b7abbd6958921809b717c0c399832f1a162412d3be07b9
- MD5 570d821f4dbbaced91589426f430ff08
- SHA1 5218f590b969978196dadeea79beb2105aa80aae
- SHA512 ba361546bbf0d075287864ad8c4ced460c22e0eedff8477d652314772e63ced245f4dba48f65f297ce2d005641619c9ef41f29bc2ceab59fbe4026ac24596617
- SSDEEP 24576:etfBAkaJBIrFPVCEJZBoYLpKSgCCICW4NFoSntVjc2BxQpOx10s6tFMqQH:WraJyFPVlJxLpfc5Ft1ciQk3H
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
570d821f4dbbaced91589426f430ff08_JaffaCakes118.ace 1.1MB
-
out.ace.ace 1.1MB
-
Total order confirmation April 10 2017.exe.exe 1.5MB
out.ace
- SHA256 cca041e34546ca2022b7abbd6958921809b717c0c399832f1a162412d3be07b9
- MD5 570d821f4dbbaced91589426f430ff08
- SHA1 5218f590b969978196dadeea79beb2105aa80aae
- SHA512 ba361546bbf0d075287864ad8c4ced460c22e0eedff8477d652314772e63ced245f4dba48f65f297ce2d005641619c9ef41f29bc2ceab59fbe4026ac24596617
- SSDEEP 24576:etfBAkaJBIrFPVCEJZBoYLpKSgCCICW4NFoSntVjc2BxQpOx10s6tFMqQH:WraJyFPVlJxLpfc5Ft1ciQk3H
- MD5 SHA1 SHA512 SSDEEP
Total order confirmation April 10 2017.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ebdb910c35ce8b21168a4bda0dae16b3a64f66670763be89a81e322d8ddab431
- MD5 d31daa3adb9285b7024438799d3a7fc8
- SHA1 3a4a3684c7a475bae5b47aad1ad750996add764b
- SHA512 9d3febe2e0603e0f6d040dff42b194fa2be309260724f9bfc879fd72990718145a239a6817b8fbcf1fd1c2e3209896c94282fc88e9bc61d064b393f0b271d8dc
- SSDEEP 49152:41wV28FzbXmsC/C2d4A7k5r3HN2i54kZW:VVvFzisC/r4UkJ3HN2i54mW
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
90:34:fc:cf:9f:fe:b3:17:a3:89:7b:95:3a:4b:c4:0a:8e:e9:95:89:f7:91:44:7a:15:ab:79:37:5e:99:cc:23
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Tim Kosse,O=Tim Kosse,L=Köln,ST=Nordrhein-Westfalen,C=DE
Chains
May 16, 2024
PE Signature issue
Digest
9e:39:2c:be:1a:c3:c9:f5:0b:ed:2d:55:00:c2:d2:85:bd:4d:ed:89
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Tim Kosse,O=Tim Kosse,L=Köln,ST=Nordrhein-Westfalen,C=DE
Chains
Mar 13, 2017
CN=Tim Kosse,O=Tim Kosse,L=Köln,ST=Nordrhein-Westfalen,C=DE
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Tim Kosse,O=Tim Kosse,L=Köln,ST=Nordrhein-Westfalen,C=DE
Serial Number
01:bc:a2:f9:59:37:e3:f8:50:f5:46:b3:b6:0d:a8:6f
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 9, 2016 - Feb 13, 2019
Subject
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping
Timespan
Nov 10, 2006 - Nov 10, 2021
Subject
CN=DigiCert Timestamp Responder,O=DigiCert,C=US
Serial Number
03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Issuer
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 22, 2014 - Oct 22, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Tim Kosse,O=Tim Kosse,L=Köln,ST=Nordrhein-Westfalen,C=DE
Serial Number
01:bc:a2:f9:59:37:e3:f8:50:f5:46:b3:b6:0d:a8:6f
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 9, 2016 - Feb 13, 2019
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
4
Entry point
1215166
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
363KB
Virtual Size
363KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ