42865f8a1e0a28757f44968c01a9c9b7_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

42865f8a1e0a28757f44968c01a9c9b7_JaffaCakes118
Size

64KB
MD5

42865f8a1e0a28757f44968c01a9c9b7
SHA1

1cecb6dcba1f063045b12bca4da16b4d68c991c0
SHA256

6f0eee8ecc2af9b0f1e3a93249a6a633ae52469e46c8030259b700ad8b508205
SHA512

781b12554caf9047611ed7315e33886daa6db2abacdc12e629cddbd91eeaa3ab5ad74165cde0851e9755dcbf5bb9185d502c1afdc756b455c1b46a02c387b8d8
SSDEEP

1536:lQQvLCXkmPtQkmulB45htI6JFh3b2qSEH+nmwm:qQzCUZhntbDh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42865f8a1e0a28757f44968c01a9c9b7_JaffaCakes118

Files

42865f8a1e0a28757f44968c01a9c9b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af60c0270e5a326812673c045f712018

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaCheckType
__vbaCheckTypeVar
__vbaChkstk
__vbaCopyBytes
__vbaCyI4
__vbaCyMul
__vbaBoolVarNull
__vbaEraseKeepData
__vbaEraseNoPop
__vbaExitEachColl
__vbaFailedFriend
__vbaFileLock
__vbaBoolStr
__vbaAryVar
__vbaAryRecMove
__vbaDateVar
__vbaAryLock

user32

GetMessageA
EndDeferWindowPos
ShowCursor
CreateDialogIndirectParamA
CreateAcceleratorTableA
ActivateKeyboardLayout
DestroyCursor
SetMenuInfo

advapi32

RegQueryValueA
RegOpenKeyExA
RegEnumKeyA
LsaClose
LsaCreateAccount
LsaCreateSecret
LsaCreateTrustedDomainEx
LsaDeleteTrustedDomain
LsaEnumerateAccountRights
LsaEnumerateAccounts
LsaEnumeratePrivilegesOfAccount
LsaEnumerateTrustedDomains
LsaEnumerateTrustedDomainsEx
LsaFreeMemory
LsaGetQuotasForAccount
LsaGetSystemAccessAccount
LsaGetUserName
LsaICLookupNames
LsaICLookupSids
LsaLookupPrivilegeDisplayName
RegCloseKey

kernel32

GetDateFormatA
TlsAlloc
lstrcpyA
InitializeCriticalSection

dinput

DirectInputCreateEx

Exports

Exports

Adena
Awpdxjvw
Aywbdbzfpw
Bbqdhfvifm
Cixgfp
Ctey
Cwjom
Cxbor
Davmipao
Ebqhnnu
Edlbel
Erthsrsynj
Evroazvwp
Ezzmfx
Fvivorext
Gmvkduah
Gnsfbmtcof
Hfobdk
Hngzgsww
Hwxzmwzndqh
Hztvaxlscly
Iaahw
Ictlr
Iqvogohknxm
Iuhc
Iuyx
Ixkmsuv
Jgidfcxcxkf
Jhlpkqsu
Jkqllufmmad
Jzrkotzmqd
Kfvyt
Ktbkhphrt
Mcrhbfpvjk
Mflfjruru
Mksbkxfaolc
Mnqzplwe
Mosotapvr
Mylrzdoqqb
Namghkdc
Nbitwiua
Nsqjwchkp
Nxrecxfgjzt
Ofad
Ofmtkrgmy
Ogne
Onwym
Oxcejjyi
Pqlvjejgnl
Pssrv
Qklo
Qojhmzalfx
Qvrzc
Rbhsrwhpewm
Rdhdeqbdfvb
Rhvhmdb
Riysugzjjeu
Rzuccx
Snbpqtda
Syqye
Tabrx
Tpabsl
Txvdfeo
Udjvyexjk
Uhkizhjeawh
Urzywx
Uvyabfmra
Vbmgfhxi
Vcqxavj
Vfjuwx
Vpcidi
Vvpguthls
Wfjj
Xsvcovdppbu
Yevakikje
Yhyhdsnrau
Ylrfmzywhz
Zdxoofky
Zmeatblv

Sections

.text
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af60c0270e5a326812673c045f712018

Headers

File Characteristics

Imports

msvbvm60

user32

advapi32

kernel32

dinput

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 16KB

.rdata Size: 13KB - Virtual size: 16KB

.data Size: 8KB - Virtual size: 12KB

.idata Size: 3KB - Virtual size: 4KB

.rsrc Size: 23KB - Virtual size: 24KB

.text
Size: 15KB - Virtual size: 16KB

.rdata
Size: 13KB - Virtual size: 16KB

.data
Size: 8KB - Virtual size: 12KB

.idata
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 23KB - Virtual size: 24KB