45db4bc0883e76b55c629afc2a3ac2b0_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

45db4bc0883e76b55c629afc2a3ac2b0_JaffaCakes118
Size

526KB
MD5

45db4bc0883e76b55c629afc2a3ac2b0
SHA1

666d1f3da6f296d42fbfe5c9c558926042951fe9
SHA256

bb2fc2a4bc7b4f0b3df27886ab86267b5b0cf841b02618c21e2bc1b068c225a7
SHA512

419cde2e84f26581b570a37f4f599019774e5de04e5cbdd2067dab28bef738823c3c89b0939a3ec6f8c58477bdfe685beb257f7bada12546b44e62edaa48a83d
SSDEEP

12288:pTntQgZSVkrLxREXPGGlexkafv5SgJUMfQg4ECCxH/1r3K/eAxCz+zXLbzLY72nH:NOgLrLxREXPGGlexkafv5SgJUMfQg4EK

Score

1^/10

Malware Config

Signatures

Files

45db4bc0883e76b55c629afc2a3ac2b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

494c3616ad51caaeea77876c22c2902c

Code Sign

01
Certificate

Issuer

CN=InstallScript Setup Launcher,O=EffectMatrix Inc.\ ,C=FR

Not Before

06-10-2018 06:57

Not After

06-10-2019 06:57

Subject

CN=InstallScript Setup Launcher,O=EffectMatrix Inc.\ ,C=FR

a5:a7:8a:be:8d:a7:91:be:67:73:f6:18:11:ef:fd:42:1b:fa:c3:30:18:a7:2e:cd:71:02:55:61:c3:3e:a9:99
Signer

Actual PE Digest

a5:a7:8a:be:8d:a7:91:be:67:73:f6:18:11:ef:fd:42:1b:fa:c3:30:18:a7:2e:cd:71:02:55:61:c3:3e:a9:99

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaEnd
__vbaVarIdiv
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
ord660
__vbaSetSystemError
ord661
__vbaHresultCheckObj
_adj_fdiv_m32
ord669
__vbaCyErrVar
ord594
__vbaOnError
_adj_fdiv_m16i
ord702
__vbaObjSetAddref
_adj_fdivr_m16i
ord521
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
ord527
__vbaGenerateBoundsError
__vbaStrCmp
__vbaVarTstEq
DllFunctionCall
ord671
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaUI1I4
__vbaExceptHandler
ord712
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaVarCat
__vbaDateVar
ord537
_CIlog
__vbaErrorOverflow
__vbaNew2
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord610
__vbaStrToAnsi
_CIatan
__vbaStrMove
ord618
__vbaI4Cy
_allmul
ord544
_CItan
ord546
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 504KB - Virtual size: 503KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

494c3616ad51caaeea77876c22c2902c

Code Sign

01Certificate

a5:a7:8a:be:8d:a7:91:be:67:73:f6:18:11:ef:fd:42:1b:fa:c3:30:18:a7:2e:cd:71:02:55:61:c3:3e:a9:99Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 504KB - Virtual size: 503KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 12KB - Virtual size: 10KB

01
Certificate

a5:a7:8a:be:8d:a7:91:be:67:73:f6:18:11:ef:fd:42:1b:fa:c3:30:18:a7:2e:cd:71:02:55:61:c3:3e:a9:99
Signer

.text
Size: 504KB - Virtual size: 503KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 12KB - Virtual size: 10KB