b2dc382298123499428257ee5dd98a5b_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

b2dc382298123499428257ee5dd98a5b_JaffaCakes118
Size

614KB
MD5

b2dc382298123499428257ee5dd98a5b
SHA1

c30ef442312682787a4974a80f3a2f676b6ffa27
SHA256

e2a6e7872e024c9741f18f9cbc33ae716f216c8fbf582a56918bf51cb183dbae
SHA512

436c1e7ace3f66099d1a85053427fc0e3eb5ce60f6f78e539bb49ecb4253d07c156a8068f489bfa4e919bee9f374cc83ca0d013f6edbf36bda5c84454aa33dec
SSDEEP

6144:hItSFSzmUeqyiOOoCfIkGClb4bvS4G3mMkj+O2yzU6GimnZ6zIFwQcRbbSzaXCOH:hItSQorbvvMk4xoeeXpT

Score

1^/10

Malware Config

Signatures

Files

b2dc382298123499428257ee5dd98a5b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

906b03f2b46bd5fc39e3fab36927cfac

Code Sign

01
Certificate

Issuer

CN=Registry First Aid 9,O=Fotos_auf_CD_DVD_2017_Dlx_trial (en-US),C=UK

Not Before

18-10-2018 06:38

Not After

17-10-2021 06:38

Subject

CN=Registry First Aid 9,O=Fotos_auf_CD_DVD_2017_Dlx_trial (en-US),C=UK

1d:11:7f:b6:35:0e:6d:d2:28:f3:07:b2:c3:2a:23:02:91:5b:1c:48:12:18:69:77:05:c5:c9:92:07:2d:4c:2d
Signer

Actual PE Digest

1d:11:7f:b6:35:0e:6d:d2:28:f3:07:b2:c3:2a:23:02:91:5b:1c:48:12:18:69:77:05:c5:c9:92:07:2d:4c:2d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
ord589
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
ord660
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
ord666
__vbaLateMemSt
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
ord631
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
DllFunctionCall
ord671
__vbaLbound
_adj_fpatan
ord678
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaVarCat
ord645
_CIlog
__vbaErrorOverflow
ord646
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaLateMemCall
__vbaVarDup
__vbaStrToAnsi
__vbaFpI4
_CIatan
__vbaStrMove
__vbaR8IntI4
ord543
_allmul
__vbaFpCSngR4
_CItan
ord546
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 580KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

906b03f2b46bd5fc39e3fab36927cfac

Code Sign

01Certificate

1d:11:7f:b6:35:0e:6d:d2:28:f3:07:b2:c3:2a:23:02:91:5b:1c:48:12:18:69:77:05:c5:c9:92:07:2d:4c:2dSigner

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 580KB - Virtual size: 577KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 24KB - Virtual size: 20KB

01
Certificate

1d:11:7f:b6:35:0e:6d:d2:28:f3:07:b2:c3:2a:23:02:91:5b:1c:48:12:18:69:77:05:c5:c9:92:07:2d:4c:2d
Signer

.text
Size: 580KB - Virtual size: 577KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 24KB - Virtual size: 20KB