69197892c5248bb3747b090d7382dfae_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

69197892c5248bb3747b090d7382dfae_JaffaCakes118
Size

1.2MB
MD5

69197892c5248bb3747b090d7382dfae
SHA1

32d5db1fda61111fea6ef91e544fe1216bfe4cd1
SHA256

feb08525766d01cdc21de477bee9267e64920dec2260e2a7a479eec3fabb53de
SHA512

23a2241e1829b581356657d046ebcf4579c8063cd15745934706656b935621f7fcc974853d29bd8b07b69e2362099e59b97ed2a47f7445e533d279ba9fac7c98
SSDEEP

12288:QikSwcGvAejubiCfO9sv9ha8GtPK85dELoaP2HFXbXUiHpF8FYFA:WJAejumtEY8GtPKrLhuH11F8FYFA

Score

1^/10

Malware Config

Signatures

Files

69197892c5248bb3747b090d7382dfae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

472c7e9c8e43d06b6f282125b09edac8

Code Sign

01
Certificate

Issuer

CN=K-Lite Codec Pack Setup,O=InstallShield Co. Inc. All Rights Reserved.,C=CA

Not Before

22-10-2018 09:01

Not After

21-10-2020 09:01

Subject

CN=K-Lite Codec Pack Setup,O=InstallShield Co. Inc. All Rights Reserved.,C=CA

1f:d9:f9:66:d6:0c:e2:1b:78:69:3f:ff:1c:49:ff:44:a8:74:1a:cb
Signer

Actual PE Digest

1f:d9:f9:66:d6:0c:e2:1b:78:69:3f:ff:1c:49:ff:44:a8:74:1a:cb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
_adj_fdiv_m64
ord516
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaFileCloseAll
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaCyI4
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord537
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
__vbaInStr
__vbaR8Str
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
__vbaFpI4
ord616
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaUI1Var
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

472c7e9c8e43d06b6f282125b09edac8

Code Sign

01Certificate

1f:d9:f9:66:d6:0c:e2:1b:78:69:3f:ff:1c:49:ff:44:a8:74:1a:cbSigner

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 20KB - Virtual size: 18KB

01
Certificate

1f:d9:f9:66:d6:0c:e2:1b:78:69:3f:ff:1c:49:ff:44:a8:74:1a:cb
Signer

.text
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 20KB - Virtual size: 18KB