81c2164f228b08c4875c4bda15e42414_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

81c2164f228b08c4875c4bda15e42414_JaffaCakes118
Size

942KB
MD5

81c2164f228b08c4875c4bda15e42414
SHA1

62808efc421cc87c46d37ae1fb7f3fb76815dd4a
SHA256

936503806306b3e59a849c4d3cd47c7b84df655b3835bafaa4116cdba5a53d31
SHA512

b3941cc734ea240b3cb7c4fea6fcb6b31bc7294023f16925cda856b57adc0c4437c3b87ff0f681bd55082601b27fb9b115dc8626a24f40c189edef3677887d4e
SSDEEP

12288:uH37AqAplrHFt1YVy8vgp8wqSgS0va3lKAEfyS6GR2BpOIrIC/Kn:uH3EqAHrHj12LdaBWXA+ySN+fg

Score

1^/10

Malware Config

Signatures

Files

81c2164f228b08c4875c4bda15e42414_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a00436e547f15172e3d7ed8cb20de84a

Code Sign

01
Certificate

Issuer

CN=Build Number\,9288112 (IDM),O=LegalTrademarks Sid Ltd,C=GR

Not Before

13-11-2018 17:19

Not After

12-11-2022 17:19

Subject

CN=Build Number\,9288112 (IDM),O=LegalTrademarks Sid Ltd,C=GR

de:8a:cf:23:32:b9:c9:8f:1e:cb:80:6c:c8:b1:13:31:8a:ba:f8:86
Signer

Actual PE Digest

de:8a:cf:23:32:b9:c9:8f:1e:cb:80:6c:c8:b1:13:31:8a:ba:f8:86

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarTstGt
__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
ord695
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaGet3
__vbaVarTstEq
__vbaI2I4
DllFunctionCall
_adj_fpatan
__vbaLateIdCallLd
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaVarMul
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarAdd
__vbaStrToAnsi
__vbaVarDup
ord617
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 908KB - Virtual size: 905KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a00436e547f15172e3d7ed8cb20de84a

Code Sign

01Certificate

de:8a:cf:23:32:b9:c9:8f:1e:cb:80:6c:c8:b1:13:31:8a:ba:f8:86Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 908KB - Virtual size: 905KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 24KB - Virtual size: 22KB

01
Certificate

de:8a:cf:23:32:b9:c9:8f:1e:cb:80:6c:c8:b1:13:31:8a:ba:f8:86
Signer

.text
Size: 908KB - Virtual size: 905KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 24KB - Virtual size: 22KB