248be2fb0d95f13798d851f61ae8db9d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

248be2fb0d95f13798d851f61ae8db9d_JaffaCakes118
Size

80KB
MD5

248be2fb0d95f13798d851f61ae8db9d
SHA1

5c4b39679a21acf7035b7a4d3426918ad99925f6
SHA256

1582f68e2cad8c108a370e53117fce0c049d7599321cff6e01e4345be6c712ba
SHA512

2e2636a5a83895fb0197c40f83aa844b31222d7f0c510cc155327f0c318a3ac51d4be4c62c02cd77f904c562d224af72f9d109e32c20c991abd8b8953d598b82
SSDEEP

1536:/dPKd9+9OgMFKPuj5InYO5QENDnrodmLbldNNlnjVyS2fH+WoWy8TrNOPZM:ZRzDnrodmLbldNNlnjVyS2fH+WoWy8TB

Score

1^/10

Malware Config

Signatures

Files

248be2fb0d95f13798d851f61ae8db9d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b188861ba6a3e82cb9ea62e147dc83c

Code Sign

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

25/04/2007, 00:00

Not After

09/07/2019, 18:40

Subject

CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

da:61:49:95:64:a7:f1:8e:be:8b:03:b7:12:c2:9e:09
Certificate

Issuer

CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US

Not Before

13/08/2010, 00:00

Not After

13/08/2011, 23:59

Subject

CN=武汉天宸信息技术有限公司,OU=WoSign Class 3 Code Signing,O=武汉天宸信息技术有限公司,L=武汉市,ST=湖北省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:25:f2:a7:6b:41:aa:53:85:17:42:32:7d:37:d2:d5:cd:47:27:a5
Signer

Actual PE Digest

7b:25:f2:a7:6b:41:aa:53:85:17:42:32:7d:37:d2:d5:cd:47:27:a5

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaVarForInit
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
__vbaRefVarAry
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
DllFunctionCall
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaUbound
ord644
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaAryLock
__vbaVarDup
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaUI1Var
__vbaAryUnlock
__vbaVarForNext
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b188861ba6a3e82cb9ea62e147dc83c

Code Sign

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

da:61:49:95:64:a7:f1:8e:be:8b:03:b7:12:c2:9e:09Certificate

Extended Key Usages

Key Usages

7b:25:f2:a7:6b:41:aa:53:85:17:42:32:7d:37:d2:d5:cd:47:27:a5Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 64KB - Virtual size: 62KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 2KB

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

da:61:49:95:64:a7:f1:8e:be:8b:03:b7:12:c2:9e:09
Certificate

7b:25:f2:a7:6b:41:aa:53:85:17:42:32:7d:37:d2:d5:cd:47:27:a5
Signer

.text
Size: 64KB - Virtual size: 62KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 2KB