11abd7aecefc47c064b07149a99de228_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

11abd7aecefc47c064b07149a99de228_JaffaCakes118
Size

594KB
MD5

11abd7aecefc47c064b07149a99de228
SHA1

4b90c699db34946dd5ff102813f49e82e2332151
SHA256

c25b698af42faa7bb67db16cd2d91f1228d4ce616bc3abe338a2089ab3e7af4b
SHA512

22d1962ed883de53b53ef9472fd2ead8fbb17914b24941d9113e1af211747b8db08457364c0fbf8b018b32b64a92192c595a598d60cd5e0e17eb990d42efbf7b
SSDEEP

12288:MLHOvsUrKknxbUQ+4IxyqstvvTJXkDwij9jr0UNocjZ+U1ksuXqsaeYTUhs8bEgy:YHODq2irj9P0g1hTpgAJUKpEZ9B9mNca

Score

1^/10

Malware Config

Signatures

Files

11abd7aecefc47c064b07149a99de228_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c4ba8b49f75a65ec2b4b3b21caa14a64

Code Sign

07
Certificate

Issuer

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03-05-2011 07:00

Not After

03-05-2031 07:00

Subject

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e7:e1:7e:97:d5:72:dd:14
Certificate

Issuer

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03-04-2018 20:22

Not After

03-04-2019 20:22

Subject

CN=BRYNET Srl,O=BRYNET Srl,L=Reggio Emilia,ST=Reggio Emilia,C=IT

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07
Certificate

Issuer

CN=Starfield Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03-05-2011 07:00

Not After

03-05-2031 07:00

Subject

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1f:dc:58:e9:66:08:4c:0e
Certificate

Issuer

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

16-10-2018 07:00

Not After

16-10-2023 07:00

Subject

CN=Starfield Timestamp Authority - G2,O=Starfield Technologies\, LLC,L=Scottsdale,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

88:7f:76:f8:4e:1f:d2:fd:ed:1c:23:c2:2c:c7:29:95:13:64:7b:e4
Signer

Actual PE Digest

88:7f:76:f8:4e:1f:d2:fd:ed:1c:23:c2:2c:c7:29:95:13:64:7b:e4

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
ord585
ord693
__vbaFreeVar
__vbaCyMul
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
ord698
_adj_fprem1
__vbaStrCat
ord660
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaOnError
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord521
__vbaFpR8
_CIsin
ord525
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
__vbaAryConstruct2
DllFunctionCall
_adj_fpatan
__vbaLateIdCallLd
__vbaStrR8
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord607
ord608
__vbaFPException
__vbaInStrVar
ord537
_CIlog
__vbaErrorOverflow
__vbaNew2
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord575
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaI4Var
__vbaLateMemCall
__vbaStrToAnsi
__vbaVarDup
ord616
__vbaVarCopy
__vbaFpI4
ord617
__vbaLateMemCallLd
_CIatan
__vbaStrMove
ord618
__vbaI4Cy
ord619
_allmul
__vbaFpCSngR4
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 568KB - Virtual size: 565KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4ba8b49f75a65ec2b4b3b21caa14a64

Code Sign

07Certificate

Key Usages

e7:e1:7e:97:d5:72:dd:14Certificate

Extended Key Usages

Key Usages

07Certificate

Key Usages

1f:dc:58:e9:66:08:4c:0eCertificate

Extended Key Usages

Key Usages

88:7f:76:f8:4e:1f:d2:fd:ed:1c:23:c2:2c:c7:29:95:13:64:7b:e4Signer

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 568KB - Virtual size: 565KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 12KB - Virtual size: 10KB

07
Certificate

e7:e1:7e:97:d5:72:dd:14
Certificate

07
Certificate

1f:dc:58:e9:66:08:4c:0e
Certificate

88:7f:76:f8:4e:1f:d2:fd:ed:1c:23:c2:2c:c7:29:95:13:64:7b:e4
Signer

.text
Size: 568KB - Virtual size: 565KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 12KB - Virtual size: 10KB