683bb8bad14e44ba8c553c01fde767a4_JaffaCakes118

General

Target

683bb8bad14e44ba8c553c01fde767a4_JaffaCakes118
Size

52KB
MD5

683bb8bad14e44ba8c553c01fde767a4
SHA1

9d180e1e7a7967bdc3940b1d15018d884aa2ea92
SHA256

d1036822992c5f8d3242f4a301506ea7421fb5116ad937f9ad6fc8a13cb83a05
SHA512

a874cf3148d192f7427ad6f5a2697462c407bb12c6d6c7a1268a1f773ac2770fbb4d2ed85c5be4ab98b457e537aa44af795cbbb5a563a0638b5c3960e4b31cbd
SSDEEP

768:E1dKVSslDj/ZcKN2lpxQJHAJqP8K/WDQMQocaidMAbCChEnXCBp99C3Qm:Edslhc3pxQpAJQ/GQMVtlyBp9k3x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
683bb8bad14e44ba8c553c01fde767a4_JaffaCakes118

Files

683bb8bad14e44ba8c553c01fde767a4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

12541812aef338d3c1de6ff3fc73b291

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvfw32

MCIWndCreateA
ICGetDisplayFormat
ICDraw
ICCompressorChoose

ole32

CoCreateInstance
CoGetClassObject
ReadClassStg
OleUninitialize
OleInitialize
CoUninitialize
CoRevokeClassObject
CoInitialize

kernel32

ExitProcess
GetStartupInfoA
lstrcatA
SetUnhandledExceptionFilter
GetModuleHandleA
GetCommandLineA
CloseHandle
InitializeCriticalSection

advapi32

LsaICLookupSids
LsaCreateAccount
LsaCreateTrustedDomainEx
LsaCreateTrustedDomain

user32

ActivateKeyboardLayout
CreateDesktopW
RegisterClassA
SetFocus
ShowWindow
MessageBoxA

msvbvm60

__vbaErrorOverflow
__vbaExitEachAry
__vbaErase
__vbaCyErrVar
__vbaChkstk
__vbaFailedFriend
__vbaAryVar
__vbaFileClose
__vbaBoolStr
__vbaEraseKeepData

wininet

InternetCloseHandle
FindNextUrlCacheGroup
InternetCrackUrlA

dsound

DirectSoundCreate8
DirectSoundCaptureEnumerateA
DirectSoundCaptureCreate
DirectSoundCaptureCreate8

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

12541812aef338d3c1de6ff3fc73b291

Headers

File Characteristics

Imports

msvfw32

ole32

kernel32

advapi32

user32

msvbvm60

wininet

dsound

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 10KB - Virtual size: 12KB

.data Size: 14KB - Virtual size: 16KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 10KB - Virtual size: 12KB

.data
Size: 14KB - Virtual size: 16KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB