ee8390bec37063e2fd95a8827cb5f3d5_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ee8390bec37063e2fd95a8827cb5f3d5_JaffaCakes118
Size

550KB
MD5

ee8390bec37063e2fd95a8827cb5f3d5
SHA1

01ccadef917865870fb23a43deeb4e3708e96b47
SHA256

b2d10e9274ac7a432fdd3652bd3a3ca1f29aee7c2d8517ed3026e3da5ac1aba6
SHA512

0dd164008402605c4420bedb371309fc04de5b26b915f48586dc4a8deceb1fe182de7d82f85ffa91986364f2d13aa8b79b5b364da655f91496260b721d6ed365
SSDEEP

6144:vaOi3Tu/Px0xqfJqeEbxOgax7XNpZnyidBZnyidtMi2AZ0:vuS3xAqfJqeiOHx7Xlrn0

Score

1^/10

Malware Config

Signatures

Files

ee8390bec37063e2fd95a8827cb5f3d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e8dcdd5f5d3d1285725a0c036e549506

Code Sign

01
Certificate

Issuer

CN=https://www.FrapsCapture.com,O=Fraps Installer Fengtao Software Inc.\ ,C=GR

Not Before

09/10/2018, 15:48

Not After

09/10/2019, 15:48

Subject

CN=https://www.FrapsCapture.com,O=Fraps Installer Fengtao Software Inc.\ ,C=GR

61:7b:b8:d6:45:25:f2:3d:f2:ed:0c:b5:0f:40:5a:35:e7:7e:86:29:d5:b4:36:36:46:97:49:7f:17:f3:2b:81
Signer

Actual PE Digest

61:7b:b8:d6:45:25:f2:3d:f2:ed:0c:b5:0f:40:5a:35:e7:7e:86:29:d5:b4:36:36:46:97:49:7f:17:f3:2b:81

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaCyMul
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
__vbaEnd
__vbaVarIdiv
_adj_fdiv_m64
ord698
__vbaFreeObjList
ord517
_adj_fprem1
__vbaStrCat
ord660
ord661
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaFpR4
__vbaFPFix
ord523
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaVarTstEq
__vbaObjVar
DllFunctionCall
ord563
ord671
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaUI1I4
__vbaExceptHandler
ord712
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaR8ErrVar
__vbaFPException
__vbaVarCat
_CIlog
__vbaErrorOverflow
ord646
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord575
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord610
__vbaStrToAnsi
__vbaVarLateMemCallLd
ord616
__vbaFpI4
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 516KB - Virtual size: 514KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e8dcdd5f5d3d1285725a0c036e549506

Code Sign

01Certificate

61:7b:b8:d6:45:25:f2:3d:f2:ed:0c:b5:0f:40:5a:35:e7:7e:86:29:d5:b4:36:36:46:97:49:7f:17:f3:2b:81Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 516KB - Virtual size: 514KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 24KB - Virtual size: 21KB

01
Certificate

61:7b:b8:d6:45:25:f2:3d:f2:ed:0c:b5:0f:40:5a:35:e7:7e:86:29:d5:b4:36:36:46:97:49:7f:17:f3:2b:81
Signer

.text
Size: 516KB - Virtual size: 514KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 24KB - Virtual size: 21KB