2cbac08a641a7663d29323c17d41252a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cbac08a641a7663d29323c17d41252a_JaffaCakes118
Size

164KB
MD5

2cbac08a641a7663d29323c17d41252a
SHA1

5230b8ba0eeb3d4fcd81bf91b1044f134e6e8e2c
SHA256

9501cabff9ce56a68d6d802105958cc1eb708136a012938a56bfdc05657a64f3
SHA512

08c477862102d6808103a31643228cc1628aaf8d6669969c0e2b44ee2b8d5a0a2fddc20d332c71a03881b68f4a0f8b450875bfd9c1772056b8ff18083e218c76
SSDEEP

3072:/4B6vxvbMESJS3LnVpKPENk8idxYnC2vZJzLdWEFYXdhaEpYbHxS1L:C6JvfLnVpVk8kanC2n5FYXd3pY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cbac08a641a7663d29323c17d41252a_JaffaCakes118

Files

2cbac08a641a7663d29323c17d41252a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a4b5180a8d4396d21111663fc9b3e49e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

__vbaFileSeek
__vbaCyStr
__vbaCheckTypeVar

user32

OemToCharW
LoadMenuA
EndPaint
SetFocus
CreateIconFromResource
CreateCursor
CopyImage
CloseWindow
DeleteMenu

kernel32

EnumResourceNamesA
FindResourceA
ExitThread
EnumResourceLanguagesW
lstrcpyA
lstrcmpiA
TlsAlloc
Sleep
SetLastError
ReadFile
RaiseException
MapViewOfFile
GetVersion
CompareStringA
GetSystemTimeAsFileTime

dinput

DirectInputCreateW

Exports

Exports

Bvyu
Lpucedirjcl

Sections

.text
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ