a77b8ef753ec31d2ad691595d525684b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a77b8ef753ec31d2ad691595d525684b_JaffaCakes118
Size

493KB
MD5

a77b8ef753ec31d2ad691595d525684b
SHA1

428b076cf1dd3f75e0e51692c439e8134ae23e8f
SHA256

f3e5e223f133fbda02c9fc7535f252e0b7c7e64b287ef72538a04c90274bafa5
SHA512

e9a93f052d5fa33f8d6c96d27db72541b84a37596edd9ded381e9f45f3d06cc590df866f9666f8d38cb8b6cbad8c56ff570e104c44aa7b67921b03eb855acd09
SSDEEP

6144:t0KQ71SVTh/5O/1qRSfpLEQU2tPNb8E3cC61JC+KZ3mL4uIm31ittVp+aZx0H:tBQ7oJ5O/1AA432BFb3cCgQZVuIGiUH

Score

1^/10

Malware Config

Signatures

Files

a77b8ef753ec31d2ad691595d525684b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f0cf2d71c5d31a0369664d6a2c33584

Code Sign

01
Certificate

Issuer

CN=Ringless,O=Gater,C=FA

Not Before

13/01/2019, 17:20

Not After

13/01/2020, 17:20

Subject

CN=Ringless,O=Gater,C=FA

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:a7:0e:65:d9:e7:ea:6c:41:6a:42:f6:9e:00:56:15:86:9e:45:c5:63:5f:c5:c2:5b:d0:be:5d:da:21:65:6f
Signer

Actual PE Digest

4c:a7:0e:65:d9:e7:ea:6c:41:6a:42:f6:9e:00:56:15:86:9e:45:c5:63:5f:c5:c2:5b:d0:be:5d:da:21:65:6f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
ord698
MethCallEngine
ord519
ord660
ord595
ord523
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord574
ord100
ord616
ord617
ord618

Sections

.text
Size: 468KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f0cf2d71c5d31a0369664d6a2c33584

Code Sign

01Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

4c:a7:0e:65:d9:e7:ea:6c:41:6a:42:f6:9e:00:56:15:86:9e:45:c5:63:5f:c5:c2:5b:d0:be:5d:da:21:65:6fSigner

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 468KB - Virtual size: 466KB

.data Size: - Virtual size: 2KB

.rsrc Size: 16KB - Virtual size: 12KB

01
Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

4c:a7:0e:65:d9:e7:ea:6c:41:6a:42:f6:9e:00:56:15:86:9e:45:c5:63:5f:c5:c2:5b:d0:be:5d:da:21:65:6f
Signer

.text
Size: 468KB - Virtual size: 466KB

.data
Size: - Virtual size: 2KB

.rsrc
Size: 16KB - Virtual size: 12KB