dbae807fc2f1fedbd9293e53e4a7cd04_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

dbae807fc2f1fedbd9293e53e4a7cd04_JaffaCakes118
Size

334KB
MD5

dbae807fc2f1fedbd9293e53e4a7cd04
SHA1

338ab477e71b72d99ef90bd4d8a00e266985fbf8
SHA256

c028ce2d5a109e4b4a1c600cce4c10ed8da1036ca42eb836a3556cc5f287ec80
SHA512

b30a11b01d659f733fc6bef8b292f9f711268a5d2b347aa869ad46c31aad95b99c764a14e2a90c767aefe3c4758bb65dcd84441c6303764ee1a93f2b2bb009f7
SSDEEP

6144:kTRn/jH7wg7hCN57TD1xVDsTC8sDUT38QDHTP8fDjTs8JTRYF/afK73hzVxC4AdL:sJjH7wg7hCN5LpiAc3Re5gddu/3msWfU

Score

1^/10

Malware Config

Signatures

Files

dbae807fc2f1fedbd9293e53e4a7cd04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f2f702971e507bf63e7e40c820be3c9

Code Sign

01
Certificate

Issuer

CN=fl,OU=fl,O=fl,L=fl,ST=fl,C=fl,1.2.840.113549.1.9.1=#1302666c

Not Before

29/05/2011, 15:46

Not After

28/05/2013, 15:46

Subject

O=Internet Widgits Pty Ltd,ST=Some-State,C=AU

11:da:96:54:54:b5:68:6d:91:4c:3d:d1:bf:7b:b3:a5:1d:b6:46:96
Signer

Actual PE Digest

11:da:96:54:54:b5:68:6d:91:4c:3d:d1:bf:7b:b3:a5:1d:b6:46:96

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
__vbaStrI2
ord583
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaFreeVar
__vbaCyMul
__vbaLenBstr
ord588
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
__vbaCyAdd
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaCyStr
ord599
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaCyI2
__vbaStrCmp
__vbaVarTstEq
__vbaI2I4
DllFunctionCall
__vbaCySub
_adj_fpatan
__vbaR4Var
__vbaR8Cy
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaVarMul
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord608
__vbaFPException
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
__vbaR8Var
_adj_fdiv_r
ord100
__vbaFpCy
__vbaVarAdd
__vbaVarDup
ord617
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaStrCy
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

text
Size: 4KB - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f2f702971e507bf63e7e40c820be3c9

Code Sign

01Certificate

11:da:96:54:54:b5:68:6d:91:4c:3d:d1:bf:7b:b3:a5:1d:b6:46:96Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 112KB - Virtual size: 109KB

.data Size: 4KB - Virtual size: 2KB

text Size: 4KB - Virtual size: 544B

.rsrc Size: 208KB - Virtual size: 205KB

01
Certificate

11:da:96:54:54:b5:68:6d:91:4c:3d:d1:bf:7b:b3:a5:1d:b6:46:96
Signer

.text
Size: 112KB - Virtual size: 109KB

.data
Size: 4KB - Virtual size: 2KB

text
Size: 4KB - Virtual size: 544B

.rsrc
Size: 208KB - Virtual size: 205KB