32cec2c43de885cd73612bad302cdff4_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

32cec2c43de885cd73612bad302cdff4_JaffaCakes118
Size

496KB
MD5

32cec2c43de885cd73612bad302cdff4
SHA1

98d05bc0e5ed94b7674b069a15b78f30e49304aa
SHA256

1d538cfa7582652f75c3b3de7be587d1a681ce3183f54c4a684147c97865e316
SHA512

e351d707ed34abbca865cd21b911a4b6453297e53c1b5d00cd941c27d127f5cd6bcc2956152c8a6369660e66d0e8b53c158ce9c5f5c63b074ab63e8cc92cccdf
SSDEEP

12288:MYYSUR+xYDSPhkUcFBpgN9yCoJY3JgkPkdO:Mt+mePyrJgvyCoJY5gk8dO

Score

1^/10

Malware Config

Signatures

Files

32cec2c43de885cd73612bad302cdff4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4c3e1a7a56e66ffd93fde9bd7086f50b

Code Sign

01:13:0b:52:68:7a:8b:ff:04:93:21:94:15:88:a5:01
Certificate

Issuer

CN=Alibaba.com Corporation Root CA,OU=CA Center,O=Alibaba.com Corporation

Not Before

22/02/2006, 00:00

Not After

19/02/2016, 23:59

Subject

CN=Alibaba.com Corporation Root CA,OU=CA Center,O=Alibaba.com Corporation

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:ba:44:6b:07:0b:13:6f:85:19:26:94:9a:66:d4:01
Certificate

Issuer

CN=Alibaba.com Corporation Root CA,OU=CA Center,O=Alibaba.com Corporation

Not Before

22/02/2006, 00:00

Not After

19/02/2016, 23:59

Subject

CN=Alipay.com Corporation Machine CA,OU=Machine CA Center,O=Alipay.com Corporation

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e2:85:a6:7e:97:54:ac:c9:48:85:01:3a:dc:3f:34:4c:88:30:0f:00
Certificate

Issuer

CN=Alipay.com Corporation Machine CA,OU=Machine CA Center,O=Alipay.com Corporation

Not Before

07/07/2010, 00:00

Not After

06/07/2011, 23:59

Subject

CN=谢坤,OU=CA Center,O=Alipay.com Corporation,1.2.840.113549.1.9.1=#0c0d3637313638324071712e636f6d,2.5.4.4=#131032303838303032333232313439303639

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

30/04/2007, 00:00

Not After

29/04/2012, 23:59

Subject

CN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

59:7a:64:8d:e1:1f:22:c9:4a:c1:38:3c:68:04:10:39:be:63:10:f6
Signer

Actual PE Digest

59:7a:64:8d:e1:1f:22:c9:4a:c1:38:3c:68:04:10:39:be:63:10:f6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasHangUpA

kernel32

SetEndOfFile
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess

user32

OpenClipboard
MessageBoxA

gdi32

SelectPalette

winmm

waveOutUnprepareHeader

winspool.drv

OpenPrinterA

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

OleInitialize

oleaut32

UnRegisterTypeLi

comctl32

ord17

ws2_32

WSAStartup

wininet

InternetCanonicalizeUrlA

comdlg32

GetFileTitleA

Sections

.text
Size: - Virtual size: 429KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.0oh0
Size: - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.0oh1
Size: 476KB - Virtual size: 472KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4c3e1a7a56e66ffd93fde9bd7086f50b

Code Sign

01:13:0b:52:68:7a:8b:ff:04:93:21:94:15:88:a5:01Certificate

Key Usages

01:ba:44:6b:07:0b:13:6f:85:19:26:94:9a:66:d4:01Certificate

Key Usages

e2:85:a6:7e:97:54:ac:c9:48:85:01:3a:dc:3f:34:4c:88:30:0f:00Certificate

Key Usages

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate

Extended Key Usages

Key Usages

59:7a:64:8d:e1:1f:22:c9:4a:c1:38:3c:68:04:10:39:be:63:10:f6Signer

Headers

File Characteristics

Imports

rasapi32

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

wininet

comdlg32

Sections

.text Size: - Virtual size: 429KB

.rdata Size: - Virtual size: 70KB

.data Size: - Virtual size: 170KB

.rsrc Size: 8KB - Virtual size: 22KB

.0oh0 Size: - Virtual size: 155KB

.0oh1 Size: 476KB - Virtual size: 472KB

.reloc Size: 4KB - Virtual size: 200B

01:13:0b:52:68:7a:8b:ff:04:93:21:94:15:88:a5:01
Certificate

01:ba:44:6b:07:0b:13:6f:85:19:26:94:9a:66:d4:01
Certificate

e2:85:a6:7e:97:54:ac:c9:48:85:01:3a:dc:3f:34:4c:88:30:0f:00
Certificate

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

59:7a:64:8d:e1:1f:22:c9:4a:c1:38:3c:68:04:10:39:be:63:10:f6
Signer

.text
Size: - Virtual size: 429KB

.rdata
Size: - Virtual size: 70KB

.data
Size: - Virtual size: 170KB

.rsrc
Size: 8KB - Virtual size: 22KB

.0oh0
Size: - Virtual size: 155KB

.0oh1
Size: 476KB - Virtual size: 472KB

.reloc
Size: 4KB - Virtual size: 200B