7d42f6a5132c13845ee3805e65637633_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

7d42f6a5132c13845ee3805e65637633_JaffaCakes118
Size

934KB
MD5

7d42f6a5132c13845ee3805e65637633
SHA1

693456e9a0288135c342db1db7a1410c5564857a
SHA256

667509212bc83301e917ec49069de1e270599c7af7a7460682e4f81808730bd5
SHA512

fe0f6a67f2c7e42c9ae623e3280fb24e48c516f815ecfa8ac4b845f5e0955d09f456c2ffc1634704fb37ee7d924908caf367a86e6cb1d301ff9bd2f47a2770e2
SSDEEP

6144:q1E1+IbCSY353YqBDb7HWbFXpb69c4GGirIg8hSDfhG6095aYgSuZera+x84nYjl:q1EY9j3PDOJ3IjvkurBp5nMp5ne3nUiU

Score

1^/10

Malware Config

Signatures

Files

7d42f6a5132c13845ee3805e65637633_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c45a3b25242d266eee70e8da9414a8e

Code Sign

01
Certificate

Issuer

CN=https://www.FrapsCapture.com,O=Fraps Installer Fengtao Software Inc.\ ,C=GR

Not Before

09-10-2018 15:48

Not After

09-10-2019 15:48

Subject

CN=https://www.FrapsCapture.com,O=Fraps Installer Fengtao Software Inc.\ ,C=GR

d2:a9:f3:0b:b8:cd:16:dc:c4:df:e6:ee:29:32:ef:74:bc:ba:59:02:44:39:5d:aa:f4:f5:c6:86:f7:8d:a2:c3
Signer

Actual PE Digest

d2:a9:f3:0b:b8:cd:16:dc:c4:df:e6:ee:29:32:ef:74:bc:ba:59:02:44:39:5d:aa:f4:f5:c6:86:f7:8d:a2:c3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
_CIcos
_adj_fptan
ord693
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
ord593
__vbaFileCloseAll
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
__vbaFpR4
__vbaFpR8
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaI2I4
DllFunctionCall
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaGetOwner3
ord537
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaInStr
__vbaNew2
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord573
__vbaI4Str
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaVarTstNe
__vbaStrToAnsi
ord616
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaFPInt
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 884KB - Virtual size: 883KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c45a3b25242d266eee70e8da9414a8e

Code Sign

01Certificate

d2:a9:f3:0b:b8:cd:16:dc:c4:df:e6:ee:29:32:ef:74:bc:ba:59:02:44:39:5d:aa:f4:f5:c6:86:f7:8d:a2:c3Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 884KB - Virtual size: 883KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 40KB - Virtual size: 38KB

01
Certificate

d2:a9:f3:0b:b8:cd:16:dc:c4:df:e6:ee:29:32:ef:74:bc:ba:59:02:44:39:5d:aa:f4:f5:c6:86:f7:8d:a2:c3
Signer

.text
Size: 884KB - Virtual size: 883KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 40KB - Virtual size: 38KB