c0681911d1eb8a9c2e7dbeda5a752869_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c0681911d1eb8a9c2e7dbeda5a752869_JaffaCakes118
Size

460KB
MD5

c0681911d1eb8a9c2e7dbeda5a752869
SHA1

a4d82805aac1af223b6a1c3c77f00d06ca950e8f
SHA256

7c44a18a3ac226354e2139fc871e42b527209bafa90cc6e7c2ad5957256e33ad
SHA512

07a2d6f9e9fa800181ea0510902c062351498b5b274110dc0c78f6c782a6aeffe95143ad3464a7f393bd57dce25d56411c3e29e130beca06c150b025a85adaf7
SSDEEP

12288:2y7RknQVG9UdlLIuqL8JPESwIQICFo6rd:2yrCUbtqoJ9wIQICFL

Score

1^/10

Malware Config

Signatures

Files

c0681911d1eb8a9c2e7dbeda5a752869_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4cd6725019e27856ab6db212d52f7ead

Code Sign

01
Certificate

Issuer

CN=TTL Qsec,O=TimeToLive,C=TL

Not Before

08/02/2019, 18:40

Not After

08/02/2020, 18:40

Subject

CN=TTL Qsec,O=TimeToLive,C=TL

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

2a:7a:68:31:36:d2:62:4a:d4:37:85:e9:ff:45:28:82:1a:dc:64:c2:09:42:97:77:90:83:62:3e:bb:65:5d:92
Signer

Actual PE Digest

2a:7a:68:31:36:d2:62:4a:d4:37:85:e9:ff:45:28:82:1a:dc:64:c2:09:42:97:77:90:83:62:3e:bb:65:5d:92

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
ord698
MethCallEngine
ord553
ord523
ord525
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord671
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord531
ProcCallEngine
ord645
ord100
ord616
ord546

Sections

.text
Size: 448KB - Virtual size: 446KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4cd6725019e27856ab6db212d52f7ead

Code Sign

01Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

2a:7a:68:31:36:d2:62:4a:d4:37:85:e9:ff:45:28:82:1a:dc:64:c2:09:42:97:77:90:83:62:3e:bb:65:5d:92Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 448KB - Virtual size: 446KB

.data Size: - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 2KB

01
Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

2a:7a:68:31:36:d2:62:4a:d4:37:85:e9:ff:45:28:82:1a:dc:64:c2:09:42:97:77:90:83:62:3e:bb:65:5d:92
Signer

.text
Size: 448KB - Virtual size: 446KB

.data
Size: - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 2KB