a86145c76a7ce5ba98bde1d3441de3c7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

a86145c76a7ce5ba98bde1d3441de3c7_JaffaCakes118
Size

633KB
MD5

a86145c76a7ce5ba98bde1d3441de3c7
SHA1

44af74247b6a00d29643a755097d11e2e8372a22
SHA256

f2a24f11eb69b0b239355b0948bb09e585d2ad639e48ff350b876780f7128089
SHA512

887a498bf3698b9886d01bae30332b940f5d4fbf386c1b5efb25bbc000618d1681ae6e5cf0f176f0b9013e4a5c401176d12b5b0d0ee1084bbdb1b01727c5a64e
SSDEEP

12288:zCnPJBtip/W8I+y2jN3RQSxm239eQSt2h9hwMp1x:z8PJjC//Bm2NeQTh9hwMV

Score

1^/10

Malware Config

Signatures

Files

a86145c76a7ce5ba98bde1d3441de3c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4fc65ca1fce84aa3e0007118df2a505b

Code Sign

01
Certificate

Issuer

CN=Gas exposure,O=Fgas,C=TA

Not Before

28/01/2019, 09:02

Not After

27/01/2022, 09:02

Subject

CN=Gas exposure,O=Fgas,C=TA

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ad:d7:12:5c:ef:9b:8e:92:40:1d:eb:1a:d3:21:75:3c:cc:0e:28:15:66:70:c2:24:38:be:8d:50:a5:75:2d:91
Signer

Actual PE Digest

ad:d7:12:5c:ef:9b:8e:92:40:1d:eb:1a:d3:21:75:3c:cc:0e:28:15:66:70:c2:24:38:be:8d:50:a5:75:2d:91

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord519
ord660
ord521
EVENT_SINK_AddRef
DllFunctionCall
ord671
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord645
ord648
ord572
ord574
ord685
ord100
ord616
ord619

Sections

.text
Size: 608KB - Virtual size: 605KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4fc65ca1fce84aa3e0007118df2a505b

Code Sign

01Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

ad:d7:12:5c:ef:9b:8e:92:40:1d:eb:1a:d3:21:75:3c:cc:0e:28:15:66:70:c2:24:38:be:8d:50:a5:75:2d:91Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 608KB - Virtual size: 605KB

.data Size: - Virtual size: 3KB

.rsrc Size: 16KB - Virtual size: 14KB

01
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

ad:d7:12:5c:ef:9b:8e:92:40:1d:eb:1a:d3:21:75:3c:cc:0e:28:15:66:70:c2:24:38:be:8d:50:a5:75:2d:91
Signer

.text
Size: 608KB - Virtual size: 605KB

.data
Size: - Virtual size: 3KB

.rsrc
Size: 16KB - Virtual size: 14KB