69864d317d226198b61bc6311e563145_JaffaCakes118

General

Target

69864d317d226198b61bc6311e563145_JaffaCakes118
Size

158KB
MD5

69864d317d226198b61bc6311e563145
SHA1

5d33ae2614a09b295f6f5cb253ebf59a79f2cfd7
SHA256

925ee2cf5d494043f0811a1fc1c3d3276d5febc831b45cddf7b4a8c88d0b37aa
SHA512

8db2604a5a42cd45511fa1cce11de853b497e2f6642f068c24b06222b3be01851c927f7ac0f2e4b50989c5515230646eb1b25bf0f6bdaa536eeedc1ff1938975
SSDEEP

3072:nOcFe1J8zAkNF9vQ8KTmU61Q0gs2/YRSOYLAS9Tp5m4Estz:OcF0J8N/9o8KiU61Q0gs2/FHPtHm4ft

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69864d317d226198b61bc6311e563145_JaffaCakes118

Files

69864d317d226198b61bc6311e563145_JaffaCakes118
.dll windows:4 windows x86 arch:x86

12541812aef338d3c1de6ff3fc73b291

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvfw32

MCIWndCreateA
ICGetDisplayFormat
ICDraw
ICCompressorChoose

ole32

CoCreateInstance
CoGetClassObject
ReadClassStg
OleUninitialize
OleInitialize
CoUninitialize
CoRevokeClassObject
CoInitialize

kernel32

ExitProcess
GetStartupInfoA
lstrcatA
SetUnhandledExceptionFilter
GetModuleHandleA
GetCommandLineA
CloseHandle
InitializeCriticalSection

advapi32

LsaICLookupSids
LsaCreateAccount
LsaCreateTrustedDomainEx
LsaCreateTrustedDomain

user32

ActivateKeyboardLayout
CreateDesktopW
RegisterClassA
SetFocus
ShowWindow
MessageBoxA

msvbvm60

__vbaErrorOverflow
__vbaExitEachAry
__vbaErase
__vbaCyErrVar
__vbaChkstk
__vbaFailedFriend
__vbaAryVar
__vbaFileClose
__vbaBoolStr
__vbaEraseKeepData

wininet

InternetCloseHandle
FindNextUrlCacheGroup
InternetCrackUrlA

dsound

DirectSoundCreate8
DirectSoundCaptureEnumerateA
DirectSoundCaptureCreate
DirectSoundCaptureCreate8

Sections

.text
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

12541812aef338d3c1de6ff3fc73b291

Headers

File Characteristics

Imports

msvfw32

ole32

kernel32

advapi32

user32

msvbvm60

wininet

dsound

Sections

.text Size: 32KB - Virtual size: 36KB

.rdata Size: 46KB - Virtual size: 48KB

.data Size: 69KB - Virtual size: 92KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 32KB - Virtual size: 36KB

.rdata
Size: 46KB - Virtual size: 48KB

.data
Size: 69KB - Virtual size: 92KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB