3b248962ebf2b8baed72fda3f3cb83ba_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

3b248962ebf2b8baed72fda3f3cb83ba_JaffaCakes118
Size

5.8MB
MD5

3b248962ebf2b8baed72fda3f3cb83ba
SHA1

2b2f8609a82b6ede2805b7a0b2c9f6cfda7eaa31
SHA256

0986cd9d76717791862f7db793bdd93767832b9ff78e6dd40e3813b9c98c22a5
SHA512

4d4f0593c4d6d34589cb1a6c841fa5c4fa34cc3aa2e914974041e67c9b24f036ebe2eba07c62e679922819d5bcf96fc5938df4b52b844dc74b9a6f276ac6698c
SSDEEP

98304:NXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXe:NXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXO

Score

1^/10

Malware Config

Signatures

Files

3b248962ebf2b8baed72fda3f3cb83ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c9235dbb7395ce8dab57deddbb32fd28

Code Sign

27:b2
Certificate

Issuer

CN=CCA India 2014,O=India PKI,C=IN

Not Before

05/03/2014, 11:29

Not After

05/03/2024, 06:30

Subject

CN=SafeScrypt CA 2014,OU=Certifying Authority,O=Sify Technologies Limited,POSTALCODE=600 113,STREET=No.4\, Rajiv Gandhi Salai\, Taramani\, Chennai,ST=Tamil Nadu,C=IN,2.5.4.51=#1314494920466c6f6f722c20546964656c205061726b

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1e:c6:76:b0:01:01:10:fd
Certificate

Issuer

CN=SafeScrypt sub-CA for RCAI Class 2 2014,OU=Sub-CA,O=Sify Technologies Limited,C=IN

Not Before

10/10/2016, 06:15

Not After

10/10/2018, 06:15

Subject

SERIALNUMBER=550a7177c18daa796c462987cb1c3d028be900baaee96da6565db22bb38aa205,CN=SUNIL JAIN,O=Personal,POSTALCODE=122002,ST=Delhi,C=IN,2.5.4.20=#134034343134663632613034306666383135323234306564633937343233663333656230383432386463386564643232313531393464633164323538376535343936

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

19:e3:b1:24:01
Certificate

Issuer

CN=SafeScrypt CA 2014,OU=Certifying Authority,O=Sify Technologies Limited,POSTALCODE=600 113,STREET=No.4\, Rajiv Gandhi Salai\, Taramani\, Chennai,ST=Tamil Nadu,C=IN,2.5.4.51=#1314494920466c6f6f722c20546964656c205061726b

Not Before

06/03/2014, 04:30

Not After

05/03/2024, 04:30

Subject

CN=SafeScrypt sub-CA for RCAI Class 2 2014,OU=Sub-CA,O=Sify Technologies Limited,C=IN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

37:64:8c:18:3b:d0:e9:5c:ae:17:6b:34:af:73:71:dd:75:b8:5f:c4
Signer

Actual PE Digest

37:64:8c:18:3b:d0:e9:5c:ae:17:6b:34:af:73:71:dd:75:b8:5f:c4

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
__vbaNameFile
_adj_fdiv_m32
__vbaExitProc
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
ord529
_adj_fpatan
EVENT_SINK_Release
__vbaNew
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 228KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9235dbb7395ce8dab57deddbb32fd28

Code Sign

27:b2Certificate

Key Usages

1e:c6:76:b0:01:01:10:fdCertificate

Key Usages

19:e3:b1:24:01Certificate

Key Usages

37:64:8c:18:3b:d0:e9:5c:ae:17:6b:34:af:73:71:dd:75:b8:5f:c4Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 228KB - Virtual size: 224KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 112KB - Virtual size: 110KB

27:b2
Certificate

1e:c6:76:b0:01:01:10:fd
Certificate

19:e3:b1:24:01
Certificate

37:64:8c:18:3b:d0:e9:5c:ae:17:6b:34:af:73:71:dd:75:b8:5f:c4
Signer

.text
Size: 228KB - Virtual size: 224KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 112KB - Virtual size: 110KB