08ef3e7e0701f22a31032251671b605d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

08ef3e7e0701f22a31032251671b605d_JaffaCakes118
Size

537KB
MD5

08ef3e7e0701f22a31032251671b605d
SHA1

dbfcbc1a86a418a19b666fc1967ee3e340ab552a
SHA256

1943e5e35db694ddf144bd6edd0f2a4e994ce589eb3208ecab2ba205edaa6b37
SHA512

defbeae9052cd9d2b4e0a05701c0e472231a6ff25315376096e462afb17f2ec11728d62906a8e8f0fb766d191247628a8c066462d6767909136cd502f90b42e4
SSDEEP

6144:lwB7CkbIWMDtVr3Xqk9RYrQ2zAInMg+8/XiJCKkxmZCOAq:lwB+kcjDl9YQXInj+8/XnaCRq

Score

1^/10

Malware Config

Signatures

Files

08ef3e7e0701f22a31032251671b605d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

637cac35e967436d6d60c9cfcdc77d38

Code Sign

01
Certificate

Issuer

CN=Turn Soft 2018 ©,O=Turn Soft 2018 ©,C=CH

Not Before

24/11/2018, 11:02

Not After

24/11/2019, 11:02

Subject

CN=Turn Soft 2018 ©,O=Turn Soft 2018 ©,C=CH

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

82:97:87:3a:b1:0e:0b:19:d5:e8:0e:42:9d:ab:55:57:7c:98:9a:99:78:01:28:e3:0b:4d:2a:99:54:a4:1f:f6
Signer

Actual PE Digest

82:97:87:3a:b1:0e:0b:19:d5:e8:0e:42:9d:ab:55:57:7c:98:9a:99:78:01:28:e3:0b:4d:2a:99:54:a4:1f:f6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
ord589
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
ord660
__vbaSetSystemError
__vbaLenBstrB
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
ord521
__vbaFpR8
_CIsin
ord525
__vbaChkstk
EVENT_SINK_AddRef
__vbaAryConstruct2
__vbaVarTstEq
DllFunctionCall
ord671
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
ord608
__vbaFPException
__vbaInStrVar
_CIlog
ord646
__vbaNew2
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaI4Var
__vbaLateMemCall
__vbaVarDup
__vbaStrToAnsi
ord616
__vbaVarCopy
ord617
__vbaLateMemCallLd
_CIatan
__vbaStrMove
__vbaR8IntI4
ord619
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 516KB - Virtual size: 514KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

637cac35e967436d6d60c9cfcdc77d38

Code Sign

01Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6Certificate

Extended Key Usages

Key Usages

82:97:87:3a:b1:0e:0b:19:d5:e8:0e:42:9d:ab:55:57:7c:98:9a:99:78:01:28:e3:0b:4d:2a:99:54:a4:1f:f6Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 516KB - Virtual size: 514KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 8KB - Virtual size: 7KB

01
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

82:97:87:3a:b1:0e:0b:19:d5:e8:0e:42:9d:ab:55:57:7c:98:9a:99:78:01:28:e3:0b:4d:2a:99:54:a4:1f:f6
Signer

.text
Size: 516KB - Virtual size: 514KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 8KB - Virtual size: 7KB