c133eeb293298bfa22b427a4c2d52e00_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

c133eeb293298bfa22b427a4c2d52e00_JaffaCakes118
Size

605KB
MD5

c133eeb293298bfa22b427a4c2d52e00
SHA1

f7cdcedafca4efe6530e4709272933a55e0c42c8
SHA256

355c9a581c79296c71c92d5ada4d869588eea3aae0e771dd42f993a93c08d9a0
SHA512

30d17997b59024249c413150c456de33e68cac83d084a43d8aa2eb7317c79cd70aec45fb1fd31f3bd5cffd29562c34b5cefa291966d4373e6cee1dd67a4d053b
SSDEEP

6144:72OTOdppTyj6zHA39pKfNsjfgfufUGie75QuXhTXTBeSTlS3/EUUze:nGlySYksozYTA0AsLq

Score

1^/10

Malware Config

Signatures

Files

c133eeb293298bfa22b427a4c2d52e00_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ffccebaaeb65ef9f9329e91bb3e4972e

Code Sign

01
Certificate

Issuer

CN=Gas exposure,O=Fgas,C=TA

Not Before

28/01/2019, 09:02

Not After

27/01/2022, 09:02

Subject

CN=Gas exposure,O=Fgas,C=TA

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:8a:1d:b2:03:1b:87:8e:a8:b7:be:e3:3f:3a:f4:9d:15:23:47:26:38:57:f5:69:b4:01:57:24:f1:85:e7:21
Signer

Actual PE Digest

01:8a:1d:b2:03:1b:87:8e:a8:b7:be:e3:3f:3a:f4:9d:15:23:47:26:38:57:f5:69:b4:01:57:24:f1:85:e7:21

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
ord698
MethCallEngine
ord516
ord519
ord660
ord521
EVENT_SINK_AddRef
DllFunctionCall
ord671
ord673
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord645
ord648
ord572
ord685
ord100
ord616
ord619

Sections

.text
Size: 580KB - Virtual size: 579KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ffccebaaeb65ef9f9329e91bb3e4972e

Code Sign

01Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6Certificate

Extended Key Usages

Key Usages

01:8a:1d:b2:03:1b:87:8e:a8:b7:be:e3:3f:3a:f4:9d:15:23:47:26:38:57:f5:69:b4:01:57:24:f1:85:e7:21Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 580KB - Virtual size: 579KB

.data Size: - Virtual size: 3KB

.rsrc Size: 16KB - Virtual size: 14KB

01
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

01:8a:1d:b2:03:1b:87:8e:a8:b7:be:e3:3f:3a:f4:9d:15:23:47:26:38:57:f5:69:b4:01:57:24:f1:85:e7:21
Signer

.text
Size: 580KB - Virtual size: 579KB

.data
Size: - Virtual size: 3KB

.rsrc
Size: 16KB - Virtual size: 14KB