b7abd393723cbdb242d48cea300d203c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

b7abd393723cbdb242d48cea300d203c_JaffaCakes118
Size

1.3MB
MD5

b7abd393723cbdb242d48cea300d203c
SHA1

84c9dd0616fbd198b2e14525c8f9ea63e1c4c454
SHA256

8dfa262e2de73e7941784e6c1d3de404c9f22a01650bcf5086ebc240ff2e46ab
SHA512

838ae31359ff95cd4f6fd3e6bf693f7a68974855afd3d6160a45614f234fd1d3f5074196eef7a714c0d91df0fd5634910acaa124ef6bbf4f4af177101a7fcb9a
SSDEEP

12288:FlKRTbvsoHb4mUGByKLjJsIxjh3dUCMALHckL:FlqTRSeckL

Score

1^/10

Malware Config

Signatures

Files

b7abd393723cbdb242d48cea300d203c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4ba268e912b602b38120c9fa3575bd36

Code Sign

01
Certificate

Issuer

CN=K-Lite Codec Pack Setup,O=InstallShield Co. Inc. All Rights Reserved.,C=CA

Not Before

22/10/2018, 09:01

Not After

21/10/2020, 09:01

Subject

CN=K-Lite Codec Pack Setup,O=InstallShield Co. Inc. All Rights Reserved.,C=CA

01
Certificate

Issuer

CN=K-Lite Codec Pack Setup,O=InstallShield Co. Inc. All Rights Reserved.,C=CA

Not Before

22/10/2018, 09:01

Not After

21/10/2020, 09:01

Subject

CN=K-Lite Codec Pack Setup,O=InstallShield Co. Inc. All Rights Reserved.,C=CA

4a:d5:43:c2:8a:0f:74:d3:47:40:f2:0b:37:82:52:88:85:b2:0e:65:84:41:35:98:4c:cd:9d:b3:6d:43:a9:6d
Signer

Actual PE Digest

4a:d5:43:c2:8a:0f:74:d3:47:40:f2:0b:37:82:52:88:85:b2:0e:65:84:41:35:98:4c:cd:9d:b3:6d:43:a9:6d

Digest Algorithm

sha256

PE Digest Matches

true

10:0a:a7:0d:1b:33:9a:62:dc:7d:88:4d:3c:c3:53:7e:48:c3:f9:d4
Signer

Actual PE Digest

10:0a:a7:0d:1b:33:9a:62:dc:7d:88:4d:3c:c3:53:7e:48:c3:f9:d4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
_adj_fdiv_m64
ord516
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaFileCloseAll
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
__vbaFpR4
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord537
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
__vbaInStr
__vbaR8Str
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
__vbaFpI4
ord616
_CIatan
__vbaStrMove
_allmul
__vbaFpCSngR4
_CItan
__vbaUI1Var
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ba268e912b602b38120c9fa3575bd36

Code Sign

01Certificate

01Certificate

4a:d5:43:c2:8a:0f:74:d3:47:40:f2:0b:37:82:52:88:85:b2:0e:65:84:41:35:98:4c:cd:9d:b3:6d:43:a9:6dSigner

10:0a:a7:0d:1b:33:9a:62:dc:7d:88:4d:3c:c3:53:7e:48:c3:f9:d4Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 20KB - Virtual size: 18KB

01
Certificate

01
Certificate

4a:d5:43:c2:8a:0f:74:d3:47:40:f2:0b:37:82:52:88:85:b2:0e:65:84:41:35:98:4c:cd:9d:b3:6d:43:a9:6d
Signer

10:0a:a7:0d:1b:33:9a:62:dc:7d:88:4d:3c:c3:53:7e:48:c3:f9:d4
Signer

.text
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 20KB - Virtual size: 18KB