5ffddfffe9f4c32852eef6e9c879a09d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

5ffddfffe9f4c32852eef6e9c879a09d_JaffaCakes118
Size

581KB
MD5

5ffddfffe9f4c32852eef6e9c879a09d
SHA1

bcb11e0692923399c6f1f7e149a6e6dc0c78d5c6
SHA256

7a9a5a78c53d94e579829f14b8c7e079478465698667dffea74121e7cdbb31bf
SHA512

b0096e9cf02ffa87523ec091be7d5271f8f23276bc75b09f0be263a9a63eee50e72f1c682fd9eeb4df42c6a6a9c93580f135dd36a9f73eab92838527f2fe71c9
SSDEEP

6144:AKlUKpSy9W4h7BwdVJho+vJY7aJ9HN8AMu5skmtVwjftPkIxgS/p7KM9f:tl1BW4h8K8JF9HN8ASkmajlR/p7Ke

Score

1^/10

Malware Config

Signatures

Files

5ffddfffe9f4c32852eef6e9c879a09d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

587ba3bdb575b42339fc298af243f730

Code Sign

01
Certificate

Issuer

CN=Logicom Axle common,O=Plumberg Axle,C=JP

Not Before

18/02/2019, 17:14

Not After

17/02/2023, 17:14

Subject

CN=Logicom Axle common,O=Plumberg Axle,C=JP

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

99:4a:75:f2:9a:80:4d:39:ec:1e:9f:47:00:0d:b6:09:85:4f:e1:8c
Signer

Actual PE Digest

99:4a:75:f2:9a:80:4d:39:ec:1e:9f:47:00:0d:b6:09:85:4f:e1:8c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord519
ord595
ord525
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord572
ord685
ord100
ord616
ord619

Sections

.text
Size: 568KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

587ba3bdb575b42339fc298af243f730

Code Sign

01Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

99:4a:75:f2:9a:80:4d:39:ec:1e:9f:47:00:0d:b6:09:85:4f:e1:8cSigner

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 568KB - Virtual size: 564KB

.data Size: - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 2KB

01
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

99:4a:75:f2:9a:80:4d:39:ec:1e:9f:47:00:0d:b6:09:85:4f:e1:8c
Signer

.text
Size: 568KB - Virtual size: 564KB

.data
Size: - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 2KB