9e0e4436c8cefb3394b3c03238404758_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

9e0e4436c8cefb3394b3c03238404758_JaffaCakes118
Size

654KB
MD5

9e0e4436c8cefb3394b3c03238404758
SHA1

93cef24c6c4d1978105dc625989a8cd7052f1f05
SHA256

83df846558498ed1e911583df475695ca01d2a4193861c0952d6050240ac288e
SHA512

e87536fa12c0379f1ce077eab65ce976e707bc82b88d90c6a75b6f5a28e6801558ab6e402f3fa8e07448a75c114d66e496680d9ae80813f4f8a2f9b7b91bf748
SSDEEP

12288:LmweXoRBsqfiCqrr90uc0hXCbQwv0G2pHtWXkmCCC6T6YeJN:LOXoRmqfqSuc0hXCMiX2pHk8

Score

1^/10

Malware Config

Signatures

Files

9e0e4436c8cefb3394b3c03238404758_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d813316d29c3212b9e5780ce7a9e582

Code Sign

01
Certificate

Issuer

CN=https://www.samsung.com/us/,O=Samsung Electronics Corporation\, Ltd.,C=US

Not Before

12/10/2018, 07:25

Not After

11/10/2021, 07:25

Subject

CN=https://www.samsung.com/us/,O=Samsung Electronics Corporation\, Ltd.,C=US

64:43:18:64:a7:45:a9:ff:ed:b9:66:02:39:d9:a6:44:ba:7c:9e:49:d6:c3:1f:c4:c1:ec:16:b3:67:41:3a:8c
Signer

Actual PE Digest

64:43:18:64:a7:45:a9:ff:ed:b9:66:02:39:d9:a6:44:ba:7c:9e:49:d6:c3:1f:c4:c1:ec:16:b3:67:41:3a:8c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord583
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
ord697
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
ord593
ord594
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
__vbaFpR4
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaObjVar
__vbaI2I4
DllFunctionCall
_adj_fpatan
__vbaLateIdCallLd
__vbaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord716
__vbaFPException
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
ord570
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
ord573
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaVarTstNe
__vbaVarSetVar
__vbaI4Var
__vbaStrToAnsi
__vbaFpI2
__vbaFpI4
ord616
__vbaVarSetObjAddref
ord617
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 628KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d813316d29c3212b9e5780ce7a9e582

Code Sign

01Certificate

64:43:18:64:a7:45:a9:ff:ed:b9:66:02:39:d9:a6:44:ba:7c:9e:49:d6:c3:1f:c4:c1:ec:16:b3:67:41:3a:8cSigner

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 628KB - Virtual size: 627KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 16KB - Virtual size: 14KB

01
Certificate

64:43:18:64:a7:45:a9:ff:ed:b9:66:02:39:d9:a6:44:ba:7c:9e:49:d6:c3:1f:c4:c1:ec:16:b3:67:41:3a:8c
Signer

.text
Size: 628KB - Virtual size: 627KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 16KB - Virtual size: 14KB