d481c33bf386ebbf641744bfaa4cf513_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d481c33bf386ebbf641744bfaa4cf513_JaffaCakes118
Size

1.7MB
MD5

d481c33bf386ebbf641744bfaa4cf513
SHA1

b84a9aa81fe7fad4cbf86c82637eed393b5439a7
SHA256

bda8f58397acacf33ba2cd840b775c579537ba61eebd72cf79a570173003a581
SHA512

4ccbe4aadcc9cb8f78f18e27b04f55967969d6be5ffc5adf3679330bb9fc59b51e858e65fcc682c7cf91ffc5dfec019b9d11b3eecaeea145c217bbb77448e8a2
SSDEEP

24576:Dk19k1pe8eklUVxpNVWnbsNgN2B1lIPyN:Dk19k1pe8JlUVxpNVWnbsNgN2B1lI6

Score

1^/10

Malware Config

Signatures

Files

d481c33bf386ebbf641744bfaa4cf513_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fbca5b6b594bd9056e19d956ae203712

Code Sign

01
Certificate

Issuer

CN=Ragdoll,O=Ragdoll corp,C=TE

Not Before

24/01/2019, 09:17

Not After

24/01/2020, 09:17

Subject

CN=Ragdoll,O=Ragdoll corp,C=TE

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:65:74:53:f6:4e:80:b0:6f:11:7b:85:75:01:b5:df:3b:18:59:e2:8d:6b:6b:54:af:35:e3:8d:32:47:75:4c
Signer

Actual PE Digest

63:65:74:53:f6:4e:80:b0:6f:11:7b:85:75:01:b5:df:3b:18:59:e2:8d:6b:6b:54:af:35:e3:8d:32:47:75:4c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord584
ord588
ord698
MethCallEngine
ord516
ord517
ord519
ord660
ord595
ord596
ord521
EVENT_SINK_AddRef
DllFunctionCall
ord673
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord646
ord574
ord100
ord614
ord617
ord619

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbca5b6b594bd9056e19d956ae203712

Code Sign

01Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6Certificate

Extended Key Usages

Key Usages

63:65:74:53:f6:4e:80:b0:6f:11:7b:85:75:01:b5:df:3b:18:59:e2:8d:6b:6b:54:af:35:e3:8d:32:47:75:4cSigner

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.data Size: - Virtual size: 3KB

.rsrc Size: 104KB - Virtual size: 102KB

01
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

63:65:74:53:f6:4e:80:b0:6f:11:7b:85:75:01:b5:df:3b:18:59:e2:8d:6b:6b:54:af:35:e3:8d:32:47:75:4c
Signer

.text
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: - Virtual size: 3KB

.rsrc
Size: 104KB - Virtual size: 102KB