fa31e34745f661344b55ae952d17d363_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

fa31e34745f661344b55ae952d17d363_JaffaCakes118
Size

873KB
MD5

fa31e34745f661344b55ae952d17d363
SHA1

c3734cb28f707b8ec6667d1c2f4f52477038bfa9
SHA256

e04ebbbad34f6ea7bf00aa6658281f507c6012abd12ef2cbd852ea51ffc0321b
SHA512

d796d605e4371b4ec8f085eaa22c70a17f18877e48e933f84ff22eefa590d0c366bb5b97cbe00899da258ca20843440542fe44ceca6bf9a3e26e5cdc10f535a7
SSDEEP

24576:LdfOIE3Yxa9eyZW5P3Mc1TrH3WfrGADhe:Ldfq/WF3tHmtDhe

Score

1^/10

Malware Config

Signatures

Files

fa31e34745f661344b55ae952d17d363_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a90408060d9b5b6bb1bcfc897bc73b28

Code Sign

01
Certificate

Issuer

CN=CloudGate,O=CloudGate SPA,C=GR

Not Before

14-02-2019 07:25

Not After

14-02-2020 07:25

Subject

CN=CloudGate,O=CloudGate SPA,C=GR

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

a8:08:7e:18:e2:72:75:43:ae:df:dc:eb:31:03:e8:ad:c8:e9:66:23:10:fe:7b:5b:41:e0:89:e6:25:86:3d:34
Signer

Actual PE Digest

a8:08:7e:18:e2:72:75:43:ae:df:dc:eb:31:03:e8:ad:c8:e9:66:23:10:fe:7b:5b:41:e0:89:e6:25:86:3d:34

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarTstGt
__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
ord516
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaObjSet
__vbaCyAdd
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
ord527
__vbaGenerateBoundsError
__vbaAryConstruct2
__vbaCyI4
DllFunctionCall
__vbaLbound
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaFpCmpCy
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
ord648
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarDup
ord617
_CIatan
__vbaStrMove
__vbaCastObj
__vbaI4Cy
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 836KB - Virtual size: 832KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a90408060d9b5b6bb1bcfc897bc73b28

Code Sign

01Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

a8:08:7e:18:e2:72:75:43:ae:df:dc:eb:31:03:e8:ad:c8:e9:66:23:10:fe:7b:5b:41:e0:89:e6:25:86:3d:34Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 836KB - Virtual size: 832KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 24KB - Virtual size: 20KB

01
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

a8:08:7e:18:e2:72:75:43:ae:df:dc:eb:31:03:e8:ad:c8:e9:66:23:10:fe:7b:5b:41:e0:89:e6:25:86:3d:34
Signer

.text
Size: 836KB - Virtual size: 832KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 24KB - Virtual size: 20KB