34bef73440df7a3758e9e90c2fc0624f_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

34bef73440df7a3758e9e90c2fc0624f_JaffaCakes118
Size

118KB
MD5

34bef73440df7a3758e9e90c2fc0624f
SHA1

00bd1acca87d48bebd44e8a4cd52cfcfaf0894be
SHA256

658c0c8b420d45b1fd91062cd05acf851f5fc5322536254eb916d37dd0295355
SHA512

ca5385e53a727fb7d297fa5a8ac5f3c3909116ee6ddf0d112b956bb510127378f31e44e0a6feaea4075cfb6d1e44b7304caf5e22f0c8b40eb5eae609384fc9d1
SSDEEP

1536:UIGKLw0LGSLHaKCdOW+moXEqFAV1InU9FAY1InUwFAGMYLCNKN3Kc/PcBULT1PT:ULKJXEr1IU1IjNesN3zkkT1r

Score

1^/10

Malware Config

Signatures

Files

34bef73440df7a3758e9e90c2fc0624f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c8772c02d688267a5d2015244fab534

Code Sign

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

13-04-2019 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:45:e7:63:ed:04:6a:45:ab:6a:2a:fc:22:8b:69:2f:b4
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

21-04-2012 19:37

Not After

22-07-2013 11:09

Subject

CN=EUROBYTE SOFTWARE s.r.o.,O=EUROBYTE SOFTWARE s.r.o.,L=Roznov pod Radhostem,ST=Vsetin,C=CZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

43:d3:29:ce:82:59:b0:18:3b:79:15:ec:2f:a2:d2:01:3c:ea:3e:93
Signer

Actual PE Digest

43:d3:29:ce:82:59:b0:18:3b:79:15:ec:2f:a2:d2:01:3c:ea:3e:93

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord553
ord593
ord594
ord598
ord520
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ProcCallEngine
ord648
ord681
ord578
ord685
ord100
ord610
ord612
ord613
ord616
ord617
ord619
ord542
ord545

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c8772c02d688267a5d2015244fab534

Code Sign

04:00:00:00:00:01:2f:4e:e1:35:5cCertificate

Extended Key Usages

Key Usages

11:21:45:e7:63:ed:04:6a:45:ab:6a:2a:fc:22:8b:69:2f:b4Certificate

Extended Key Usages

Key Usages

43:d3:29:ce:82:59:b0:18:3b:79:15:ec:2f:a2:d2:01:3c:ea:3e:93Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 96KB - Virtual size: 94KB

.data Size: - Virtual size: 9KB

.rsrc Size: 16KB - Virtual size: 12KB

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

11:21:45:e7:63:ed:04:6a:45:ab:6a:2a:fc:22:8b:69:2f:b4
Certificate

43:d3:29:ce:82:59:b0:18:3b:79:15:ec:2f:a2:d2:01:3c:ea:3e:93
Signer

.text
Size: 96KB - Virtual size: 94KB

.data
Size: - Virtual size: 9KB

.rsrc
Size: 16KB - Virtual size: 12KB