bdb6a53a36f36c9217d211ae0c879c92_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bdb6a53a36f36c9217d211ae0c879c92_JaffaCakes118
Size

1.7MB
MD5

bdb6a53a36f36c9217d211ae0c879c92
SHA1

5e8f0a5381602d0400c856ff6f5387c9369406c6
SHA256

e973900fbf6d316eb87626cd1de26beca015407192ac35076476600c473b44fd
SHA512

798947722a0c979f5b5f341445ad58e895ca017c01a909a6b0ef3f25c1c1c5528d976df5ed0ad4729492e9f2f969640720327d8820045bc0fb8413049c069718
SSDEEP

12288:peaMeabpYin/dV+cOXIGZqFIleMC/kJ4LlPfy:eph/CcyeMCG4s

Score

1^/10

Malware Config

Signatures

Files

bdb6a53a36f36c9217d211ae0c879c92_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c9fcac78941222074b8007b3465348d

Code Sign

01
Certificate

Issuer

CN=Interactive @,O=Classical 64,C=EG

Not Before

09/12/2018, 17:03

Not After

09/12/2019, 17:03

Subject

CN=Interactive @,O=Classical 64,C=EG

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:4b:d6:02:53:72:09:92:8c:99:c0:fe:b6:c9:aa:aa:ac:98:b9:de
Signer

Actual PE Digest

06:4b:d6:02:53:72:09:92:8c:99:c0:fe:b6:c9:aa:aa:ac:98:b9:de

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
ord588
__vbaFreeVarList
_adj_fdiv_m64
ord698
ord517
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
ord594
_adj_fdiv_m16i
_adj_fdivr_m16i
ord598
ord523
_CIsin
ord525
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
__vbaCyI4
DllFunctionCall
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
ord574
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
_CIatan
__vbaStrMove
ord618
__vbaI4Cy
ord619
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c9fcac78941222074b8007b3465348d

Code Sign

01Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

06:4b:d6:02:53:72:09:92:8c:99:c0:fe:b6:c9:aa:aa:ac:98:b9:deSigner

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 36KB - Virtual size: 35KB

01
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

06:4b:d6:02:53:72:09:92:8c:99:c0:fe:b6:c9:aa:aa:ac:98:b9:de
Signer

.text
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 36KB - Virtual size: 35KB