0d6e036700752c5ae7a408b9cef2258f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d6e036700752c5ae7a408b9cef2258f_JaffaCakes118
Size

44KB
MD5

0d6e036700752c5ae7a408b9cef2258f
SHA1

0bab41d07c280120f736007ecbe51cbbd0b2a482
SHA256

58d25bea5ad71e62d7adb863d0650b3a1361c14aa8b81a327be9779b8c6bcaf8
SHA512

e256646bcf5668015bbcee9edb41a2d7f8c5ee1f79e15f948cab51939382fc901491b046f26371ab0db291dbb385664a00bc0361cf9029b74a56d49264853f7a
SSDEEP

768:apoC4hQATRSSbG1b1uVdNcNGCaZCoOrwSPi0BDvgJTdNnS8Q3Qm:aBA7NSSC1b2dNcMZCoOkMBDGTS8Q3x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d6e036700752c5ae7a408b9cef2258f_JaffaCakes118

Files

0d6e036700752c5ae7a408b9cef2258f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

418663e1916b4252aee3e1ce5c9575c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaCySub
__vbaExitProc
__vbaCyAbs

user32

ActivateKeyboardLayout
CharUpperA
DrawMenuBar
EndPaint
LoadCursorFromFileA
LoadMenuA
SetCursor
ShowWindow

kernel32

lstrcmpA
GetDateFormatA
EnumResourceLanguagesW
GetModuleHandleA
SetCurrentDirectoryA
Sleep
lstrlenA
GetFileSize
TlsSetValue

dinput

DirectInputCreateW

ole32

CreateFileMoniker
OleUninitialize
OleSetClipboard
OleInitialize
OleFlushClipboard
GetRunningObjectTable
CreateDataAdviseHolder
CoTaskMemRealloc
CLSIDFromProgID
CLSIDFromString
CoRegisterMessageFilter
CoTaskMemAlloc
ReleaseStgMedium

oleaut32

SystemTimeToVariantTime
VarFormatNumber
VarI1FromStr
VarI2FromDec
VarR8FromCy
VarUI1FromUI2
SafeArrayAccessData

Sections

.text
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ