5d44398a46b42006ad25a055c0c1f085_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5d44398a46b42006ad25a055c0c1f085_JaffaCakes118
Size

334KB
MD5

5d44398a46b42006ad25a055c0c1f085
SHA1

265869c9af86d3c489a8143d3af12cb845683ac4
SHA256

aaa7aea622fc8d8c5d24121867a842bace4494a2e386efb04216d1bc77580e09
SHA512

163c57f03a9de4a073ca1beac1dbb862104a6c3d94bf8275071d23933697d8ba213713dd2bbdf463721508111b35d387ff41b375d4b28259959ed9898b34c6b7
SSDEEP

6144:aw+eV4++U2dF4vzOJyh/1572GM2g7wNDyzpe+ip5itcoMhESAwwi:awfISvSJ8NBMYN6rvMhESVwi

Score

1^/10

Malware Config

Signatures

Files

5d44398a46b42006ad25a055c0c1f085_JaffaCakes118
.gz
Scan00094162.pdf.exe
.exe windows:4 windows x86 arch:x86

1b7af9902ffd0b949b232c90d8b3a145

Code Sign

01
Certificate

Issuer

CN=LG Electronics (in Hangul ??(LG) ??),O=Thòi-vàn-sén,C=TW

Not Before

07/09/2018, 08:13

Not After

06/09/2021, 08:13

Subject

CN=LG Electronics (in Hangul ??(LG) ??),O=Thòi-vàn-sén,C=TW

31:35:cf:3b:ad:b6:ba:e5:44:e9:57:d5:f7:47:44:c3:10:6b:87:05:42:d4:91:67:e1:2d:76:e5:6c:66:23:f6
Signer

Actual PE Digest

31:35:cf:3b:ad:b6:ba:e5:44:e9:57:d5:f7:47:44:c3:10:6b:87:05:42:d4:91:67:e1:2d:76:e5:6c:66:23:f6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
__vbaR8Sgn
ord517
_adj_fprem1
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
ord661
__vbaRecDestruct
__vbaHresultCheckObj
_adj_fdiv_m32
ord666
ord667
__vbaAryDestruct
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord521
__vbaFpR8
_CIsin
ord631
ord632
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
DllFunctionCall
__vbaLbound
ord673
_adj_fpatan
__vbaLateIdCallLd
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaVarMul
__vbaExceptHandler
__vbaStrToUnicode
ord606
ord713
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaDateVar
ord537
_CIlog
ord646
__vbaErrorOverflow
__vbaInStr
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaI4Var
ord610
__vbaStrToAnsi
__vbaVarDup
ord616
_CIatan
__vbaStrMove
ord540
ord618
ord542
ord650
_allmul
_CItan
ord546
_CIexp
__vbaFreeStr
__vbaFreeObj
ord581

Sections

.text
Size: 440KB - Virtual size: 438KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b7af9902ffd0b949b232c90d8b3a145

Code Sign

01Certificate

31:35:cf:3b:ad:b6:ba:e5:44:e9:57:d5:f7:47:44:c3:10:6b:87:05:42:d4:91:67:e1:2d:76:e5:6c:66:23:f6Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 440KB - Virtual size: 438KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 16KB - Virtual size: 12KB

01
Certificate

31:35:cf:3b:ad:b6:ba:e5:44:e9:57:d5:f7:47:44:c3:10:6b:87:05:42:d4:91:67:e1:2d:76:e5:6c:66:23:f6
Signer

.text
Size: 440KB - Virtual size: 438KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 16KB - Virtual size: 12KB