f288c5df4608416a13c4423bdd4d7f42_JaffaCakes118

General

Target

f288c5df4608416a13c4423bdd4d7f42_JaffaCakes118
Size

160KB
MD5

f288c5df4608416a13c4423bdd4d7f42
SHA1

d3fd0ecafad1938cdba12e965bfbdc8a462b39fe
SHA256

b378794cf2e2443bf13d9157df5e4e4ab1a1189e1c5c023887b865c6017ae748
SHA512

c28239e08455001808f56c1119b47e7ce2b5027fc4bbbd4898def7c4078fb59b663cba5272adf6b62452189e0fd03dd8322308c8282c43a190b3b0c663611fdd
SSDEEP

3072:1N2rZ1kzD+FBOfdfoyH2rttyoItGhvIArP/93GEy732WtFfVug7Gq:1N2rwzCPOfdVWr3PIt6vIAr/93mSW3Vn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f288c5df4608416a13c4423bdd4d7f42_JaffaCakes118

Files

f288c5df4608416a13c4423bdd4d7f42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d5fa087e3fb09e4fbbebaf51f2a576f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaCVarAryUdt
__vbaAryVarVarg
__vbaAryLock

user32

EndDialog
OemToCharBuffA
CreateIcon
CharUpperBuffA
BeginPaint
CreateMDIWindowA
LoadBitmapA

advapi32

RegQueryValueA
RegCloseKey
LsaLookupPrivilegeDisplayName
LsaICLookupNames
LsaEnumeratePrivilegesOfAccount
LsaEnumerateAccounts
LsaDeleteTrustedDomain
LsaDelete
LsaCreateTrustedDomainEx
LsaCreateSecret
LsaClose

kernel32

ExitProcess
GetACP
FindResourceA
EnumResourceLanguagesW
lstrlenA
lstrcpynA
lstrcmpiA
VirtualFree
VirtualAlloc
TlsGetValue
TlsFree
TlsAlloc
SleepEx
SetUnhandledExceptionFilter
SetEndOfFile
RtlUnwind
MapViewOfFile
LocalAlloc
GetVersion
GetTimeFormatA
GetStartupInfoA
GetOEMCP
GetModuleHandleA
CloseHandle
GetCommandLineA

dinput

DirectInputCreateEx

Exports

Exports

Bgjvrxan
Dc
Dvrzsmv
Gjlsajldzr
Kxhldwlfpiq
Qmflwrlnkuc
Rolqwd
Tfnizaoijos
Urmm
Xhcohdpx
Zswoqensgm

Sections

.text
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d5fa087e3fb09e4fbbebaf51f2a576f

Headers

File Characteristics

Imports

msvbvm60

user32

advapi32

kernel32

dinput

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 20KB

.rdata Size: 50KB - Virtual size: 52KB

.data Size: 69KB - Virtual size: 72KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 19KB - Virtual size: 20KB

.text
Size: 19KB - Virtual size: 20KB

.rdata
Size: 50KB - Virtual size: 52KB

.data
Size: 69KB - Virtual size: 72KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 19KB - Virtual size: 20KB