7d21f28d7cef9823c14390099db2a77e_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

7d21f28d7cef9823c14390099db2a77e_JaffaCakes118
Size

542KB
MD5

7d21f28d7cef9823c14390099db2a77e
SHA1

014e2640d576d25610e397416b845a803cc5be84
SHA256

af55d0f2df9d1742fdf595a951ceaf5a07ba676d843332d13de204b690873401
SHA512

d14783f5dc98588f981e71ff3488d110972d6f91d04c8efd1c6929297a0da36c0a4837936f5cb435bd27b321bff53e7a4cf3647c18391ce5c347fedf8b88ab52
SSDEEP

6144:H8wg/RRBQr3GK4fNkmLSG0fB/VmGYxT7OMZ/HVxn/EHB6EX5/Sl0HqOo1+YerFZB:BgJo4FkmLCRVmG4JHHEzXt+Lve

Score

1^/10

Malware Config

Signatures

Files

7d21f28d7cef9823c14390099db2a77e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4ec2a25b8338b826ea221e7ee60099e0

Code Sign

01
Certificate

Issuer

CN=Quartz complex diode corporation 2017,O=RoseCounter quartz,C=DE

Not Before

19/02/2019, 17:12

Not After

18/02/2021, 17:12

Subject

CN=Quartz complex diode corporation 2017,O=RoseCounter quartz,C=DE

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e7:61:54:bb:bb:c2:ca:6d:95:ff:e7:ca:52:f1:cb:82:0a:d2:72:d1
Signer

Actual PE Digest

e7:61:54:bb:bb:c2:ca:6d:95:ff:e7:ca:52:f1:cb:82:0a:d2:72:d1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord519
ord631
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord646
ord573
ord685
ord578
ord100
ord616
ord618

Sections

.text
Size: 528KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ec2a25b8338b826ea221e7ee60099e0

Code Sign

01Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

e7:61:54:bb:bb:c2:ca:6d:95:ff:e7:ca:52:f1:cb:82:0a:d2:72:d1Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 528KB - Virtual size: 524KB

.data Size: - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 3KB

01
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

e7:61:54:bb:bb:c2:ca:6d:95:ff:e7:ca:52:f1:cb:82:0a:d2:72:d1
Signer

.text
Size: 528KB - Virtual size: 524KB

.data
Size: - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 3KB