8406223a9a543386d331b0ba578e252f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8406223a9a543386d331b0ba578e252f_JaffaCakes118
Size

35KB
MD5

8406223a9a543386d331b0ba578e252f
SHA1

e12ad5ddf2741b09ac2677354852c829377e0ae6
SHA256

165e6409c5a4e9230dcf1cdf2b95a332621e133c9178fc46a0c977a4f56e5a04
SHA512

4eca869c86996b9c23073517ebcc9f64fde8dc27e2f4b1400f36207339b9794697bf7481a73280123a0ce06bce0624026b6c2d04b2d0b8d87517d16d42bbb6cd
SSDEEP

768:F4spOZuWEbtiNfkaPuQb5PA4hPhnsB2wFWu7cp:FPpD6uGljccp

Score

1^/10

Malware Config

Signatures

Files

8406223a9a543386d331b0ba578e252f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5fcdf1c4045978bd224e8504a16ac312

Code Sign

43:6b:88:d8:3f:d4:0f:d7:f2:4e:1d:d2:22:85:f2:7e
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

20-09-2011 11:04

Not After

20-09-2026 23:59

Subject

CN=Certum Code Signing CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:fc:8f:8e:de:0f:f5:ea:1c:86:fe:b1:71:d6:f1:c0
Certificate

Issuer

CN=Certum Code Signing CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

06-03-2013 12:03

Not After

06-03-2014 12:03

Subject

CN=RAFSOFT.NET Rafał Morawski,O=RAFSOFT.NET,C=PL,1.2.840.113549.1.9.1=#0c1a726166616c2e6d6f726177736b6940726166736f66742e6e6574

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

98:ca:9c:1b:de:70:66:73:61:98:0a:91:f0:2c:f2:2f:42:97:f1:0e
Signer

Actual PE Digest

98:ca:9c:1b:de:70:66:73:61:98:0a:91:f0:2c:f2:2f:42:97:f1:0e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
_CIcos
_adj_fptan
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
ord666
__vbaExitProc
__vbaObjSet
__vbaOnError
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaFpR8
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaVarTstEq
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord605
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaVarCat
ord537
ord645
_CIlog
__vbaErrorOverflow
__vbaInStr
__vbaNew2
__vbaR8Str
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
ord576
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
ord689
__vbaVarAdd
__vbaVarDup
__vbaStrToAnsi
ord613
__vbaVarCopy
ord617
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj
ord581

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5fcdf1c4045978bd224e8504a16ac312

Code Sign

43:6b:88:d8:3f:d4:0f:d7:f2:4e:1d:d2:22:85:f2:7eCertificate

Extended Key Usages

Key Usages

01:fc:8f:8e:de:0f:f5:ea:1c:86:fe:b1:71:d6:f1:c0Certificate

Extended Key Usages

Key Usages

98:ca:9c:1b:de:70:66:73:61:98:0a:91:f0:2c:f2:2f:42:97:f1:0eSigner

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 20KB - Virtual size: 18KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 2KB

43:6b:88:d8:3f:d4:0f:d7:f2:4e:1d:d2:22:85:f2:7e
Certificate

01:fc:8f:8e:de:0f:f5:ea:1c:86:fe:b1:71:d6:f1:c0
Certificate

98:ca:9c:1b:de:70:66:73:61:98:0a:91:f0:2c:f2:2f:42:97:f1:0e
Signer

.text
Size: 20KB - Virtual size: 18KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 2KB