8a9d65e13f15cfbc3cb2517613285b7d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

8a9d65e13f15cfbc3cb2517613285b7d_JaffaCakes118
Size

542KB
MD5

8a9d65e13f15cfbc3cb2517613285b7d
SHA1

ea7f061b6fc23b5c85ab80ebc5b64cea28ea1f13
SHA256

5d840ab20a1bbe6918a7b662f1f4adfe805a9497bbf44098f3c724bde78e0a50
SHA512

b61d89caed63608624a71f9d6b53978fec45be91fd20fb78752ce9fa5c0f113ec493d41e6884bfb2fca25ea7a9497855175779f9328e161ff524b3b650b2ea34
SSDEEP

6144:knKwQtxjur+KK03F4W1Rn3uKUeQ26+ZSjINqXSk7dstGzw7eFKa2yiqHBOpK9Al/:S6DjiRFbBj0MTP71

Score

1^/10

Malware Config

Signatures

Files

8a9d65e13f15cfbc3cb2517613285b7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8ad295e57c720e307008a80861bd1170

Code Sign

01
Certificate

Issuer

CN=https://www.FrapsCapture.com,O=Fraps Installer Fengtao Software Inc.\ ,C=GR

Not Before

09/10/2018, 15:48

Not After

09/10/2019, 15:48

Subject

CN=https://www.FrapsCapture.com,O=Fraps Installer Fengtao Software Inc.\ ,C=GR

04:ea:30:52:9d:87:a1:0a:cf:19:0c:d8:db:39:2c:42:7e:1f:d7:9f:ff:da:34:fb:21:f4:b4:73:28:f8:1d:fa
Signer

Actual PE Digest

04:ea:30:52:9d:87:a1:0a:cf:19:0c:d8:db:39:2c:42:7e:1f:d7:9f:ff:da:34:fb:21:f4:b4:73:28:f8:1d:fa

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
ord693
__vbaFreeVar
__vbaLenBstr
__vbaStrVarMove
__vbaFreeVarList
__vbaEnd
__vbaVarIdiv
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
ord660
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaFpR4
ord521
_CIsin
ord631
__vbaChkstk
EVENT_SINK_AddRef
ord527
__vbaStrCmp
__vbaVarTstEq
__vbaObjVar
DllFunctionCall
ord563
_adj_fpatan
__vbaRedim
ord678
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaUI1I4
__vbaExceptHandler
ord712
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaR8ErrVar
ord609
__vbaFPException
__vbaVarCat
_CIlog
ord646
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord610
__vbaStrToAnsi
__vbaVarLateMemCallLd
__vbaFpI4
ord616
_CIatan
__vbaStrMove
_allmul
ord545
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 508KB - Virtual size: 506KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8ad295e57c720e307008a80861bd1170

Code Sign

01Certificate

04:ea:30:52:9d:87:a1:0a:cf:19:0c:d8:db:39:2c:42:7e:1f:d7:9f:ff:da:34:fb:21:f4:b4:73:28:f8:1d:faSigner

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 508KB - Virtual size: 506KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 24KB - Virtual size: 21KB

01
Certificate

04:ea:30:52:9d:87:a1:0a:cf:19:0c:d8:db:39:2c:42:7e:1f:d7:9f:ff:da:34:fb:21:f4:b4:73:28:f8:1d:fa
Signer

.text
Size: 508KB - Virtual size: 506KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 24KB - Virtual size: 21KB