abb58ebe6df3ad433a6e6c473ab369b6_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

abb58ebe6df3ad433a6e6c473ab369b6_JaffaCakes118
Size

390KB
MD5

abb58ebe6df3ad433a6e6c473ab369b6
SHA1

2a8397d186dfd86e3d12a52fad2f4850c563f7aa
SHA256

6475b73a4ce3887858d09f46b0e8e4ec5699c355e98c5f23468c85bfeb140947
SHA512

4f541e7aa25347ea08d0eef5cec7dfcb038d455a4ed7a39d93c7db15708f768321f5c070b353745828996cb0cf9996069c9c3c5c8be20b5d4692581d8026f142
SSDEEP

6144:GGXs/M0VSon98suz1Zr3fX1FTVgeAAwRlWRzixZ8CmEfhJNPQ0rJ9Sk:nXs/3VDglPjTV9wRbf8CmELNPQ0rJ91

Score

1^/10

Malware Config

Signatures

Files

abb58ebe6df3ad433a6e6c473ab369b6_JaffaCakes118
.ace
out.ace
.ace
xuyaogoumaiwupin51.exe
.exe windows:4 windows x86 arch:x86

73ec795c6c369c6ce2c3b4c3f6477daa

Code Sign

01:13:0b:52:68:7a:8b:ff:04:93:21:94:15:88:a5:01
Certificate

Issuer

CN=Alibaba.com Corporation Root CA,OU=CA Center,O=Alibaba.com Corporation

Not Before

22-02-2006 00:00

Not After

19-02-2016 23:59

Subject

CN=Alibaba.com Corporation Root CA,OU=CA Center,O=Alibaba.com Corporation

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:ba:44:6b:07:0b:13:6f:85:19:26:94:9a:66:d4:01
Certificate

Issuer

CN=Alibaba.com Corporation Root CA,OU=CA Center,O=Alibaba.com Corporation

Not Before

22-02-2006 00:00

Not After

19-02-2016 23:59

Subject

CN=Alipay.com Corporation Machine CA,OU=Machine CA Center,O=Alipay.com Corporation

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ac:9a:f0:c8:cd:92:ea:ce:e6:7b:b8:e1:50:0d:eb:4d:f4:be:0a:00
Certificate

Issuer

CN=Alipay.com Corporation Machine CA,OU=Machine CA Center,O=Alipay.com Corporation

Not Before

05-06-2011 00:00

Not After

03-06-2012 23:59

Subject

CN=刘琼华,OU=CA Center,O=Alipay.com Corporation,1.2.840.113549.1.9.1=#0c146261697a616e6775616932324073696e612e636e,2.5.4.4=#131032303838363032303932313136343936

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

6f:eb:4d:d7:7e:1e:d9:b4:53:48:8a:31:6f:6e:d2:a5:d6:00:4e:7e
Signer

Actual PE Digest

6f:eb:4d:d7:7e:1e:d9:b4:53:48:8a:31:6f:6e:d2:a5:d6:00:4e:7e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DuplicateHandle
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW

user32

DefWindowProcA
AdjustWindowRectEx

Sections

0
Size: 250KB - Virtual size: 489KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: - Virtual size: 16B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

6
Size: - Virtual size: 38KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

7
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

8
Size: 46KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

10
Size: 7KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

73ec795c6c369c6ce2c3b4c3f6477daa

Code Sign

01:13:0b:52:68:7a:8b:ff:04:93:21:94:15:88:a5:01Certificate

Key Usages

01:ba:44:6b:07:0b:13:6f:85:19:26:94:9a:66:d4:01Certificate

Key Usages

ac:9a:f0:c8:cd:92:ea:ce:e6:7b:b8:e1:50:0d:eb:4d:f4:be:0a:00Certificate

Key Usages

6f:eb:4d:d7:7e:1e:d9:b4:53:48:8a:31:6f:6e:d2:a5:d6:00:4e:7eSigner

Headers

File Characteristics

Imports

kernel32

user32

Sections

0 Size: 250KB - Virtual size: 489KB

1 Size: 7KB - Virtual size: 7KB

2 Size: - Virtual size: 4KB

3 Size: 3KB - Virtual size: 9KB

4 Size: - Virtual size: 16B

5 Size: 512B - Virtual size: 24B

6 Size: - Virtual size: 38KB

7 Size: 43KB - Virtual size: 44KB

8 Size: 46KB - Virtual size: 71KB

9 Size: 3KB - Virtual size: 3KB

10 Size: 7KB - Virtual size: 28KB

01:13:0b:52:68:7a:8b:ff:04:93:21:94:15:88:a5:01
Certificate

01:ba:44:6b:07:0b:13:6f:85:19:26:94:9a:66:d4:01
Certificate

ac:9a:f0:c8:cd:92:ea:ce:e6:7b:b8:e1:50:0d:eb:4d:f4:be:0a:00
Certificate

6f:eb:4d:d7:7e:1e:d9:b4:53:48:8a:31:6f:6e:d2:a5:d6:00:4e:7e
Signer

0
Size: 250KB - Virtual size: 489KB

1
Size: 7KB - Virtual size: 7KB

2
Size: - Virtual size: 4KB

3
Size: 3KB - Virtual size: 9KB

4
Size: - Virtual size: 16B

5
Size: 512B - Virtual size: 24B

6
Size: - Virtual size: 38KB

7
Size: 43KB - Virtual size: 44KB

8
Size: 46KB - Virtual size: 71KB

9
Size: 3KB - Virtual size: 3KB

10
Size: 7KB - Virtual size: 28KB