eea4e4ae485450285d45ee89f4a78a59_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

eea4e4ae485450285d45ee89f4a78a59_JaffaCakes118
Size

3.5MB
MD5

eea4e4ae485450285d45ee89f4a78a59
SHA1

0872a4d18cf211f6fcc3050bb908d7ab59802754
SHA256

b56006ff25132ebc513d30668c1d778ff91b40479041043e129cddca58a9ed39
SHA512

fefd0092ba621f8f05d500190a4deef8a40ba6626d814049a0437e7a5acad338f14192e60d62f49728cb0096401bd94059614cb047595c8c6f677144f37fce0e
SSDEEP

98304:F0Wls9Pw/uD7NRTjD2b/XAXvc33aX4UoqiikWy:F0RBnD7NpvmXCv8aX4LqUJ

Score

1^/10

Malware Config

Signatures

Files

eea4e4ae485450285d45ee89f4a78a59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cafe4a1aa3dcfca7a63665012d29e6bf

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4c:60:e7:02:20:84:7d:a2:1a:63:c4:bc:e0:35:7f:13
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2016, 00:00

Not After

18/01/2018, 23:59

Subject

CN=SAITO-KIKAKU CORPORATION,O=SAITO-KIKAKU CORPORATION,POSTALCODE=916-0047,STREET=4-3-12、 Yanagi-machi,L=Sabae-shi,ST=Fukui,C=JP

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:79:4c:25:42:4d:a7:21:29:6c:a0:51:1c:c4:12:1e:b3:2c:6b:9f
Signer

Actual PE Digest

a0:79:4c:25:42:4d:a7:21:29:6c:a0:51:1c:c4:12:1e:b3:2c:6b:9f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strncpy
atoi
wcschr
wcscat
wcscpy
_strdup
strchr
strtok
sprintf
_stricmp
_tell
_write
strstr
_strnicmp
memset
_open
_filelength
malloc
_lseek
_read
free
_close
strrchr
wcsrchr
wcsstr
wcscspn
wcslen
_beginthreadex

kernel32

DeleteFileA
GetLastError
RaiseException
InterlockedExchange
LocalAlloc
GetStartupInfoA
GetTempPathA
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CreateDirectoryA
WideCharToMultiByte
MultiByteToWideChar
GlobalLock
GlobalAlloc
GlobalReAlloc
GlobalHandle
GlobalUnlock
GlobalFree
FreeLibrary
GetSystemDirectoryA
LoadLibraryA
OutputDebugStringA
IsDBCSLeadByte
CreateFileA
GetFileTime
GetFileSize
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetWindowsDirectoryA
SearchPathA
lstrcmpiA
GetShortPathNameA
CreateProcessA
Sleep
GetExitCodeProcess
GetModuleHandleA
GetProcAddress
GetCurrentProcess
lstrcpyA
GetModuleFileNameA
lstrlenA
lstrcatA
FindClose
FindNextFileA
RemoveDirectoryA
lstrcmpA
FindFirstFileA
SetFileAttributesA
CloseHandle
GetExitCodeThread
WaitForSingleObject
GetFileAttributesA

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cafe4a1aa3dcfca7a63665012d29e6bf

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

4c:60:e7:02:20:84:7d:a2:1a:63:c4:bc:e0:35:7f:13Certificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

a0:79:4c:25:42:4d:a7:21:29:6c:a0:51:1c:c4:12:1e:b3:2c:6b:9fSigner

Headers

File Characteristics

Imports

msvcrt

kernel32

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 15KB

.rsrc Size: 12KB - Virtual size: 11KB

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

4c:60:e7:02:20:84:7d:a2:1a:63:c4:bc:e0:35:7f:13
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

a0:79:4c:25:42:4d:a7:21:29:6c:a0:51:1c:c4:12:1e:b3:2c:6b:9f
Signer

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 15KB

.rsrc
Size: 12KB - Virtual size: 11KB