97ad0714b0245825407dd25d7d168d31_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

97ad0714b0245825407dd25d7d168d31_JaffaCakes118
Size

564KB
MD5

97ad0714b0245825407dd25d7d168d31
SHA1

713a00b13a87c52b43404cd32d0f4645844709d9
SHA256

3b96a384f9989f28315eb374eae991e70ed07b88665cbf831f24bd574502feac
SHA512

6aa272cf12527bb59033bd9b449b404efcf89eee83e170f2760b299e312a76f02da2804a447dd501d76d82ed8e4e7b6cb01a08db5cc34f0b13f554d23a06d7d6
SSDEEP

12288:6ka5esDn5oQurO0UXEBLDyWv+ajVfwUZ+JBtXTmUELMUySriV:K4sDn52r/xLDyWv36VJBtXTILMvSrC

Score

1^/10

Malware Config

Signatures

Files

97ad0714b0245825407dd25d7d168d31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea1485c27970bca80b7478fd78381f2e

Code Sign

01
Certificate

Issuer

CN=GameRanger developer,O=The GameRanger developer community group,C=PR

Not Before

29/10/2018, 08:31

Not After

28/10/2022, 08:31

Subject

CN=GameRanger developer,O=The GameRanger developer community group,C=PR

01
Certificate

Issuer

CN=GameRanger developer,O=The GameRanger developer community group,C=PR

Not Before

29/10/2018, 08:31

Not After

28/10/2022, 08:31

Subject

CN=GameRanger developer,O=The GameRanger developer community group,C=PR

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:52:cc:b1:08:e2:4d:8b:cf:4e:5c:b8:e4:3f:49:b4:33:52:2d:e0:70:2f:58:2a:dd:1d:c9:98:3d:90:0f:57
Signer

Actual PE Digest

0f:52:cc:b1:08:e2:4d:8b:cf:4e:5c:b8:e4:3f:49:b4:33:52:2d:e0:70:2f:58:2a:dd:1d:c9:98:3d:90:0f:57

Digest Algorithm

sha256

PE Digest Matches

true

26:56:89:f8:5d:7d:fc:e6:1b:18:f1:48:67:ac:ec:df:2d:80:89:cb
Signer

Actual PE Digest

26:56:89:f8:5d:7d:fc:e6:1b:18:f1:48:67:ac:ec:df:2d:80:89:cb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaCyMul
__vbaFreeVar
__vbaStrVarMove
ord589
__vbaFreeVarList
__vbaVarIdiv
_adj_fdiv_m64
ord517
_adj_fprem1
ord628
__vbaStrCat
ord660
__vbaLsetFixstr
ord661
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
ord521
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
ord527
__vbaStrCmp
__vbaAryConstruct2
__vbaVarTstEq
DllFunctionCall
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord714
__vbaFPException
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaI4Var
ord610
__vbaAryLock
__vbaStrToAnsi
__vbaVarSetObjAddref
_CIatan
__vbaStrMove
ord650
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 536KB - Virtual size: 535KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea1485c27970bca80b7478fd78381f2e

Code Sign

01Certificate

01Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

0f:52:cc:b1:08:e2:4d:8b:cf:4e:5c:b8:e4:3f:49:b4:33:52:2d:e0:70:2f:58:2a:dd:1d:c9:98:3d:90:0f:57Signer

26:56:89:f8:5d:7d:fc:e6:1b:18:f1:48:67:ac:ec:df:2d:80:89:cbSigner

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 536KB - Virtual size: 535KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 12KB - Virtual size: 11KB

01
Certificate

01
Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

0f:52:cc:b1:08:e2:4d:8b:cf:4e:5c:b8:e4:3f:49:b4:33:52:2d:e0:70:2f:58:2a:dd:1d:c9:98:3d:90:0f:57
Signer

26:56:89:f8:5d:7d:fc:e6:1b:18:f1:48:67:ac:ec:df:2d:80:89:cb
Signer

.text
Size: 536KB - Virtual size: 535KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 12KB - Virtual size: 11KB