6a7f40f883a022b92aa7fdc4aad3d553_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6a7f40f883a022b92aa7fdc4aad3d553_JaffaCakes118
Size

488KB
MD5

6a7f40f883a022b92aa7fdc4aad3d553
SHA1

3aedbf17f879adda5d160c3ef10b6251b6f982a9
SHA256

2fe75ee07e2141937f15b797591f315f79226445c4a37fe3e161a2ab8cb08eb7
SHA512

11ecca47ab78df9553f8afcf8c04a6d00e3f59e68306a5e74264d756f86f6547d023690c431932a0f5c885139049645b503ed778f4d1a76f599ee025a1927add
SSDEEP

12288:chhwdyTrGcKbLaQhH7pB025CKUMN+BVJllyFWaWiXIr:4hwdm2bL5hH7pBG9MN+/HlyIw4r

Score

1^/10

Malware Config

Signatures

Files

6a7f40f883a022b92aa7fdc4aad3d553_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38037d7d29c1b7862917dcb28123fc33

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01
Certificate

Issuer

CN=Indian reserve outfit store,O=Indian reserve place (R) 2010,C=IN

Not Before

29/03/2019, 08:40

Not After

28/03/2022, 08:40

Subject

CN=Indian reserve outfit store,O=Indian reserve place (R) 2010,C=IN

5c:e3:b7:1b:37:2f:c2:4d:30:14:25:43:4b:7d:57:8f:d3:f5:70:31
Signer

Actual PE Digest

5c:e3:b7:1b:37:2f:c2:4d:30:14:25:43:4b:7d:57:8f:d3:f5:70:31

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord589
ord697
MethCallEngine
ord519
ord593
ord632
EVENT_SINK_AddRef
ord527
ord673
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord645
ord575
ord685
ord100

Sections

.text
Size: 476KB - Virtual size: 472KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38037d7d29c1b7862917dcb28123fc33

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7Certificate

Key Usages

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14Certificate

Extended Key Usages

Key Usages

01Certificate

5c:e3:b7:1b:37:2f:c2:4d:30:14:25:43:4b:7d:57:8f:d3:f5:70:31Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 476KB - Virtual size: 472KB

.data Size: - Virtual size: 6KB

.rsrc Size: 4KB - Virtual size: 1KB

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

01
Certificate

5c:e3:b7:1b:37:2f:c2:4d:30:14:25:43:4b:7d:57:8f:d3:f5:70:31
Signer

.text
Size: 476KB - Virtual size: 472KB

.data
Size: - Virtual size: 6KB

.rsrc
Size: 4KB - Virtual size: 1KB