680b928046c8d517b5a60535b6a3224e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

680b928046c8d517b5a60535b6a3224e_JaffaCakes118
Size

824KB
MD5

680b928046c8d517b5a60535b6a3224e
SHA1

a46c181590969ac5bb5243f33185c163792a2752
SHA256

4106864b676e7a37dc76330be3a6e0619db12907b5eec425c374431ba776612e
SHA512

e5d3674adfe3ae2e9f5cb4af77e07059dcacf2919324ba809ec858a6f1211a1874134e11b87ec3fbfce48efcc9f7553e2fea42ac53922247d4f5b3bf47bc9718
SSDEEP

3072:DPILRdrXrmmdm/yuXsDiqfXDBVT9p3kyNZaeegI+IBhbSsLa:DQfLC0YSiqfT98fn2

Score

1^/10

Malware Config

Signatures

Files

680b928046c8d517b5a60535b6a3224e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

74f49d64059b1065b07231716458f91f

Code Sign

01
Certificate

Issuer

CN=DRM copy replays,O=DRM copy dongle,C=NL

Not Before

30/04/2019, 11:44

Not After

29/04/2022, 11:44

Subject

CN=DRM copy replays,O=DRM copy dongle,C=NL

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

0a:49:01:94:e9:40:87:5f:8b:5f:a7:75:5b:76:79:00:ca:21:8f:42:dd:8a:5e:5c:b2:47:1b:8b:cf:7a:88:f8
Signer

Actual PE Digest

0a:49:01:94:e9:40:87:5f:8b:5f:a7:75:5b:76:79:00:ca:21:8f:42:dd:8a:5e:5c:b2:47:1b:8b:cf:7a:88:f8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
ord584
_CIcos
_adj_fptan
__vbaVarMove
ord586
__vbaFreeVar
ord587
__vbaStrVarMove
ord588
ord696
__vbaFreeVarList
_adj_fdiv_m64
__vbaFpCDblR8
ord698
__vbaStrErrVarCopy
_adj_fprem1
__vbaStrCat
ord552
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
ord666
__vbaAryDestruct
ord591
ord669
ord593
__vbaFileCloseAll
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord520
ord522
_CIsin
ord631
ord632
__vbaChkstk
ord526
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaVarTstEq
__vbaAryConstruct2
ord560
__vbaI2I4
DllFunctionCall
ord670
ord673
_adj_fpatan
ord674
__vbaLateIdCallLd
__vbaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaUI1I4
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord607
ord608
__vbaFPException
__vbaInStrVar
__vbaStrVarVal
__vbaDateVar
ord536
ord537
__vbaFileSeek
_CIlog
ord646
__vbaErrorOverflow
__vbaFileOpen
ord648
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord573
__vbaFreeStrList
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaFpCy
ord610
__vbaInStrB
__vbaAryLock
__vbaVarDup
__vbaStrToAnsi
__vbaStrComp
__vbaR4Sgn
__vbaFpI4
__vbaVarCopy
ord616
ord617
_CIatan
__vbaStrMove
_allmul
ord652
_CItan
ord546
__vbaFPInt
__vbaAryUnlock
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 800KB - Virtual size: 796KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74f49d64059b1065b07231716458f91f

Code Sign

01Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

0a:49:01:94:e9:40:87:5f:8b:5f:a7:75:5b:76:79:00:ca:21:8f:42:dd:8a:5e:5c:b2:47:1b:8b:cf:7a:88:f8Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 800KB - Virtual size: 796KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 12KB - Virtual size: 10KB

01
Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

0a:49:01:94:e9:40:87:5f:8b:5f:a7:75:5b:76:79:00:ca:21:8f:42:dd:8a:5e:5c:b2:47:1b:8b:cf:7a:88:f8
Signer

.text
Size: 800KB - Virtual size: 796KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 12KB - Virtual size: 10KB