3571df4812b82c4b0c61d1055cccf05f_JaffaCakes118

General

Target

3571df4812b82c4b0c61d1055cccf05f_JaffaCakes118
Size

158KB
MD5

3571df4812b82c4b0c61d1055cccf05f
SHA1

590b27e57b51917c40912439e6c46f40f09a3511
SHA256

0f4d8843a891212b3a12f0355a56abd46d9c802874862e4531e20368397e8132
SHA512

1297c3bd383130e5f8c1929bf99473e1e36cbc8bcd7f7600ea88d347fbc74dd7ef417f4fdc4de6b28ee8bfc947ea1640c32acb024d5305de8f2d6ed66b37a736
SSDEEP

3072:i+pX3gAW64If6T0dfcsgUbwUGPaaCn34Gq:RCEdfcs97QaaCo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3571df4812b82c4b0c61d1055cccf05f_JaffaCakes118

Files

3571df4812b82c4b0c61d1055cccf05f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d5fa087e3fb09e4fbbebaf51f2a576f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaCVarAryUdt
__vbaAryVarVarg
__vbaAryLock

user32

EndDialog
OemToCharBuffA
CreateIcon
CharUpperBuffA
BeginPaint
CreateMDIWindowA
LoadBitmapA

advapi32

RegQueryValueA
RegCloseKey
LsaLookupPrivilegeDisplayName
LsaICLookupNames
LsaEnumeratePrivilegesOfAccount
LsaEnumerateAccounts
LsaDeleteTrustedDomain
LsaDelete
LsaCreateTrustedDomainEx
LsaCreateSecret
LsaClose

kernel32

ExitProcess
GetACP
FindResourceA
EnumResourceLanguagesW
lstrlenA
lstrcpynA
lstrcmpiA
VirtualFree
VirtualAlloc
TlsGetValue
TlsFree
TlsAlloc
SleepEx
SetUnhandledExceptionFilter
SetEndOfFile
RtlUnwind
MapViewOfFile
LocalAlloc
GetVersion
GetTimeFormatA
GetStartupInfoA
GetOEMCP
GetModuleHandleA
CloseHandle
GetCommandLineA

dinput

DirectInputCreateEx

Exports

Exports

Bgjvrxan
Dc
Dvrzsmv
Gjlsajldzr
Kxhldwlfpiq
Qmflwrlnkuc
Rolqwd
Tfnizaoijos
Urmm
Xhcohdpx
Zswoqensgm

Sections

.text
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d5fa087e3fb09e4fbbebaf51f2a576f

Headers

File Characteristics

Imports

msvbvm60

user32

advapi32

kernel32

dinput

Exports

Exports

Sections

.text Size: 17KB - Virtual size: 20KB

.rdata Size: 50KB - Virtual size: 52KB

.data Size: 69KB - Virtual size: 72KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 19KB - Virtual size: 20KB

.text
Size: 17KB - Virtual size: 20KB

.rdata
Size: 50KB - Virtual size: 52KB

.data
Size: 69KB - Virtual size: 72KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 19KB - Virtual size: 20KB