963759de22a2f9725869d99400f973c3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

963759de22a2f9725869d99400f973c3_JaffaCakes118
Size

1001KB
MD5

963759de22a2f9725869d99400f973c3
SHA1

42b527bec1fb65bc81428cc8b6b3677c811a1743
SHA256

081255f76cedaa66bb4959109fc9c93e2e71df64d2435f2bba636e007eb7e902
SHA512

62e8be497ff122f88ce5365e33fc518892f604d2401b8d4cd7e333f332e64be2869a9e79747f90ba6d63c2f7f8263d8d7279fac104c7f23ef6935ccc0154e063
SSDEEP

12288:FV2hSitDSloxuQMKrzLFfVxq1diXpC2cRP0LTAD3fK3S9qdRgZFhDHn+iEBoBAB:7loDrzxLqjiXpCzRYTM3y3eUkD+rBoBs

Score

1^/10

Malware Config

Signatures

Files

963759de22a2f9725869d99400f973c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d4a146af39cc8aa2f5442ac5c3d4527

Code Sign

01
Certificate

Issuer

CN=C16 @,O=C16,C=AR

Not Before

05/12/2018, 18:15

Not After

05/12/2019, 18:15

Subject

CN=C16 @,O=C16,C=AR

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

70:75:71:4c:97:57:6c:d7:21:fd:de:62:56:a0:44:1c:52:89:d1:45:78:e8:6d:3e:81:49:b3:05:e1:1d:0b:2f
Signer

Actual PE Digest

70:75:71:4c:97:57:6c:d7:21:fd:de:62:56:a0:44:1c:52:89:d1:45:78:e8:6d:3e:81:49:b3:05:e1:1d:0b:2f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaStrI4
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
ord697
_adj_fdiv_m64
ord516
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
ord593
__vbaObjSet
ord595
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
ord632
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
ord527
__vbaVarTstEq
__vbaPrintObj
ord562
DllFunctionCall
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaUI1I4
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
__vbaVarDup
__vbaFpI2
ord616
_CIatan
__vbaStrMove
ord618
__vbaCastObj
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 976KB - Virtual size: 973KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d4a146af39cc8aa2f5442ac5c3d4527

Code Sign

01Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6Certificate

Extended Key Usages

Key Usages

70:75:71:4c:97:57:6c:d7:21:fd:de:62:56:a0:44:1c:52:89:d1:45:78:e8:6d:3e:81:49:b3:05:e1:1d:0b:2fSigner

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 976KB - Virtual size: 973KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 12KB - Virtual size: 10KB

01
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

70:75:71:4c:97:57:6c:d7:21:fd:de:62:56:a0:44:1c:52:89:d1:45:78:e8:6d:3e:81:49:b3:05:e1:1d:0b:2f
Signer

.text
Size: 976KB - Virtual size: 973KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 12KB - Virtual size: 10KB