98006525bb04f63ad685b3c9fb3497ea_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

98006525bb04f63ad685b3c9fb3497ea_JaffaCakes118
Size

307KB
MD5

98006525bb04f63ad685b3c9fb3497ea
SHA1

97fb43d9c9aab62c5346cc6f4c3bf2ceb690826f
SHA256

01c5b3de5be9ec75bb26857fc3320061d073de2565c7268340b174b56fceb269
SHA512

41e6690317e7681fb106a5d7626a0bcaab59bf5b028355d04ec19dbf5d12e3b83e800b09da974f4174bdbdd80b11a51b40f8e1d04ddc8f0f54ae2ace4f297746
SSDEEP

6144:hdK1rb7ue282uUYhw8UAgL/jbjZg+J4q9Par99RT8WUY0lJVGy:iFy9Puv4Au/f190r9mVFJ

Score

1^/10

Malware Config

Signatures

Files

98006525bb04f63ad685b3c9fb3497ea_JaffaCakes118
.zip
Scan00005112018111000_Inv_20180511_pdf.exe
.exe windows:4 windows x86 arch:x86

c391dd9fc7640d8160b4f7a809dcbd12

Code Sign

01
Certificate

Issuer

CN=TuneUp,O=TuneUp,C=FR

Not Before

05/11/2018, 10:12

Not After

05/11/2019, 10:12

Subject

CN=TuneUp,O=TuneUp,C=FR

01
Certificate

Issuer

CN=TuneUp,O=TuneUp,C=FR

Not Before

05/11/2018, 10:12

Not After

05/11/2019, 10:12

Subject

CN=TuneUp,O=TuneUp,C=FR

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

14:46:44:52:14:79:9c:92:0b:28:47:62:bc:a9:87:8c:42:ae:07:96:15:12:ab:1d:6a:9f:6e:d5:d3:5a:79:16
Signer

Actual PE Digest

14:46:44:52:14:79:9c:92:0b:28:47:62:bc:a9:87:8c:42:ae:07:96:15:12:ab:1d:6a:9f:6e:d5:d3:5a:79:16

Digest Algorithm

sha256

PE Digest Matches

true

4e:04:d0:de:c8:41:01:0d:a7:06:45:1f:3c:ff:69:69:03:b3:69:9c
Signer

Actual PE Digest

4e:04:d0:de:c8:41:01:0d:a7:06:45:1f:3c:ff:69:69:03:b3:69:9c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
_adj_fdiv_m16i
_adj_fdivr_m16i
ord598
ord521
_CIsin
ord631
ord525
__vbaChkstk
EVENT_SINK_AddRef
ord527
__vbaStrCmp
__vbaAryConstruct2
__vbaI2I4
DllFunctionCall
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
ord645
_CIlog
__vbaErrorOverflow
ord646
__vbaNew2
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaAryLock
__vbaStrToAnsi
__vbaFpI4
__vbaLateMemCallLd
__vbaVarSetObjAddref
_CIatan
__vbaStrMove
ord618
__vbaR8IntI4
ord542
ord650
_allmul
_CItan
ord546
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 528KB - Virtual size: 527KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c391dd9fc7640d8160b4f7a809dcbd12

Code Sign

01Certificate

01Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

14:46:44:52:14:79:9c:92:0b:28:47:62:bc:a9:87:8c:42:ae:07:96:15:12:ab:1d:6a:9f:6e:d5:d3:5a:79:16Signer

4e:04:d0:de:c8:41:01:0d:a7:06:45:1f:3c:ff:69:69:03:b3:69:9cSigner

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 528KB - Virtual size: 527KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 16KB - Virtual size: 14KB

01
Certificate

01
Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

14:46:44:52:14:79:9c:92:0b:28:47:62:bc:a9:87:8c:42:ae:07:96:15:12:ab:1d:6a:9f:6e:d5:d3:5a:79:16
Signer

4e:04:d0:de:c8:41:01:0d:a7:06:45:1f:3c:ff:69:69:03:b3:69:9c
Signer

.text
Size: 528KB - Virtual size: 527KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 16KB - Virtual size: 14KB