8ef7758fdd12c83e249c6426a79b9c94_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8ef7758fdd12c83e249c6426a79b9c94_JaffaCakes118
Size

452KB
MD5

8ef7758fdd12c83e249c6426a79b9c94
SHA1

aa7d0f7b2992fde51569cf95607d4126a591362a
SHA256

85f8c84ddd98c27bf28ffb3665846c6618c25435f0637b99bd5e0900eda40d54
SHA512

c541f40cd669455950b1f084c0dcdf8e6077dc898c0da7aec917b1d9f0a72f17b94f2611913c12d16de60e734d9c1f1e4daca8137385c214c0b187de41c5f681
SSDEEP

6144:AXCZvWO0nsYuefOzXRwazEbyQW+bgVtaGoSJla1SgYqqSconV:AyP0nsMunE20bgHaG3JkGqqSconV

Score

1^/10

Malware Config

Signatures

Files

8ef7758fdd12c83e249c6426a79b9c94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

20fe52e90021972ac7be368f9df2bb22

Code Sign

01
Certificate

Issuer

CN=Heaventools Software,O=Quick Heal Technologies Pvt. Ltd.,C=GR

Not Before

17/09/2018, 05:52

Not After

17/09/2019, 05:52

Subject

CN=Heaventools Software,O=Quick Heal Technologies Pvt. Ltd.,C=GR

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

1a:9b:82:42:d4:89:db:57:34:0b:b1:e2:d1:12:91:13:0f:ca:74:ad:49:e3:2b:e0:1c:ab:7d:5d:e0:ec:28:8c
Signer

Actual PE Digest

1a:9b:82:42:d4:89:db:57:34:0b:b1:e2:d1:12:91:13:0f:ca:74:ad:49:e3:2b:e0:1c:ab:7d:5d:e0:ec:28:8c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
ord697
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
ord516
_adj_fprem1
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaI2I4
DllFunctionCall
__vbaLbound
ord673
_adj_fpatan
__vbaLateIdCallLd
__vbaRedim
ord678
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaVarMul
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaDateVar
ord645
_CIlog
__vbaErrorOverflow
__vbaNew2
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord575
__vbaFreeStrList
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaVarTstNe
__vbaI4Var
__vbaAryLock
__vbaVarDup
__vbaStrToAnsi
__vbaFpI4
ord616
_CIatan
__vbaStrMove
ord650
_allmul
ord544
_CItan
ord546
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20fe52e90021972ac7be368f9df2bb22

Code Sign

01Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

1a:9b:82:42:d4:89:db:57:34:0b:b1:e2:d1:12:91:13:0f:ca:74:ad:49:e3:2b:e0:1c:ab:7d:5d:e0:ec:28:8cSigner

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 424KB - Virtual size: 423KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 16KB - Virtual size: 13KB

01
Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

1a:9b:82:42:d4:89:db:57:34:0b:b1:e2:d1:12:91:13:0f:ca:74:ad:49:e3:2b:e0:1c:ab:7d:5d:e0:ec:28:8c
Signer

.text
Size: 424KB - Virtual size: 423KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 16KB - Virtual size: 13KB