28911bce2ed49e288209760493be37b6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

28911bce2ed49e288209760493be37b6_JaffaCakes118
Size

1.3MB
MD5

28911bce2ed49e288209760493be37b6
SHA1

2e787e3adfe01119e7b5f9d6644740c65e62bd19
SHA256

4e38b8c8888e70be1a570de799bebfff1831eb4d1c18e80c3b31d6270730250e
SHA512

2a562d8a43945c0bca2dd2cb770d4f011300a737dd231ab0aba1fcea8f938443fa109c8846fbea35e0d0f7250b29feb979e05e343bd2040c2632ed3bf09d29d4
SSDEEP

24576:O436q+ZRnDfmJkEaPYPKBCT4LH35iNzo9TtgR:YD+JkvPYCe4LX5iNzaTtq

Score

1^/10

Malware Config

Signatures

Files

28911bce2ed49e288209760493be37b6_JaffaCakes118
.iso
out.iso
.iso
SWIFT COPY.exe
.exe windows:4 windows x86 arch:x86

94fe0c9c9723dd1ab4baffa04a191ea3

Code Sign

01
Certificate

Issuer

CN=?????? ???,O=??? ?? ?? ??????,C=JP

Not Before

23/10/2018, 08:00

Not After

22/10/2022, 08:00

Subject

CN=?????? ???,O=??? ?? ?? ??????,C=JP

01
Certificate

Issuer

CN=?????? ???,O=??? ?? ?? ??????,C=JP

Not Before

23/10/2018, 08:00

Not After

22/10/2022, 08:00

Subject

CN=?????? ???,O=??? ?? ?? ??????,C=JP

1d:fa:9c:17:7f:72:cd:66:c0:25:63:e3:20:2c:c8:3b:fe:aa:8e:dc:53:b7:5f:e7:38:58:41:29:a3:b4:e2:ef
Signer

Actual PE Digest

1d:fa:9c:17:7f:72:cd:66:c0:25:63:e3:20:2c:c8:3b:fe:aa:8e:dc:53:b7:5f:e7:38:58:41:29:a3:b4:e2:ef

Digest Algorithm

sha256

PE Digest Matches

true

f6:18:16:c8:8b:bf:d0:3f:6b:18:13:38:6d:5b:34:b4:a7:3d:05:4f
Signer

Actual PE Digest

f6:18:16:c8:8b:bf:d0:3f:6b:18:13:38:6d:5b:34:b4:a7:3d:05:4f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaInStrVarB
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaFileCloseAll
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
__vbaFpR4
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaVarTstEq
DllFunctionCall
_adj_fpatan
__vbaR4Var
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
__vbaR4ErrVar
_adj_fprem
_adj_fdivr_m64
ord714
ord608
__vbaFPException
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
__vbaR8Var
_adj_fdiv_r
ord100
__vbaVarDup
__vbaStrToAnsi
__vbaFpI4
ord616
ord617
_CIatan
__vbaStrMove
_allmul
__vbaFpCSngR4
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

94fe0c9c9723dd1ab4baffa04a191ea3

Code Sign

01Certificate

01Certificate

1d:fa:9c:17:7f:72:cd:66:c0:25:63:e3:20:2c:c8:3b:fe:aa:8e:dc:53:b7:5f:e7:38:58:41:29:a3:b4:e2:efSigner

f6:18:16:c8:8b:bf:d0:3f:6b:18:13:38:6d:5b:34:b4:a7:3d:05:4fSigner

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 20KB - Virtual size: 18KB

01
Certificate

01
Certificate

1d:fa:9c:17:7f:72:cd:66:c0:25:63:e3:20:2c:c8:3b:fe:aa:8e:dc:53:b7:5f:e7:38:58:41:29:a3:b4:e2:ef
Signer

f6:18:16:c8:8b:bf:d0:3f:6b:18:13:38:6d:5b:34:b4:a7:3d:05:4f
Signer

.text
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 20KB - Virtual size: 18KB