2fc6c2bad519e75f0620351d4c94584f_JaffaCakes118

General

Target

2fc6c2bad519e75f0620351d4c94584f_JaffaCakes118
Size

149KB
MD5

2fc6c2bad519e75f0620351d4c94584f
SHA1

feb96cbd8e5cde37400778f5782f2ca8898586da
SHA256

da1e28f92935b9b6ce72059df6a36a99d6a9601fbade29178a62e67aba2398fa
SHA512

8a7956760299f47abbf8fd35a47f2f9f357986269e8ca862c025eb0b031e42c4f21e984a60d642acd408901848572cf52f52c29e2bec4156b25b08e1a64576b4
SSDEEP

3072:vhJ+cGcQJz3zcVOueZAM+/GT8BH5b+o1ee:JEcGcQFc0u0AM++QBHr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fc6c2bad519e75f0620351d4c94584f_JaffaCakes118

Files

2fc6c2bad519e75f0620351d4c94584f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b7384e4d01a995a7f27bd1ed6e031371

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

__vbaErase
__vbaEnd
__vbaDateVar
__vbaCyVar
__vbaCySgn
__vbaCyMul
__vbaCyI2
__vbaCyAbs
__vbaCheckTypeVar
__vbaCastObjVar
__vbaCastObj
__vbaAryVar
__vbaAryRebase1Var

kernel32

EnumResourceNamesA
lstrlenA
lstrcatA
VirtualFree
TlsAlloc
SetUnhandledExceptionFilter
SetLastError
SetCurrentDirectoryA
LeaveCriticalSection
GetStartupInfoA
GetModuleHandleA
GetLocalTime
GetCommandLineA
FlushFileBuffers
CloseHandle
ExitProcess

advapi32

LsaFreeMemory
RegOpenKeyExA
LsaGetRemoteUserName
LsaEnumerateAccountsWithUserRight

user32

IsCharLowerA
EndPaint
ActivateKeyboardLayout
GetWindowTextA

ole32

OleInitialize
CoInitialize
CoGetMalloc
OleUninitialize
CoGetClassObject
CoCreateGuid
CoUninitialize
CoCreateInstance

wininet

HttpEndRequestA
FindFirstUrlCacheEntryA
FindCloseUrlCache

dsound

DirectSoundCaptureCreate8
DirectSoundCaptureEnumerateW
DirectSoundCaptureEnumerateA

msvfw32

ICOpen
ICMThunk32
ICInstall
DrawDibStart
DrawDibSetPalette

Sections

.text
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7384e4d01a995a7f27bd1ed6e031371

Headers

File Characteristics

Imports

msvbvm60

kernel32

advapi32

user32

ole32

wininet

dsound

msvfw32

Sections

.text Size: 23KB - Virtual size: 24KB

.rdata Size: 46KB - Virtual size: 48KB

.data Size: 69KB - Virtual size: 96KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 23KB - Virtual size: 24KB

.rdata
Size: 46KB - Virtual size: 48KB

.data
Size: 69KB - Virtual size: 96KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB