6eea2409dd60226e235eabb0484cbfdc_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

6eea2409dd60226e235eabb0484cbfdc_JaffaCakes118
Size

171KB
MD5

6eea2409dd60226e235eabb0484cbfdc
SHA1

dcb6070ce4d62a56a9be45e959aab067e8278150
SHA256

69f31c18c730e3f2e4c6f55b8b395d080df0b32a1d030402f2956448298ee9b1
SHA512

7c84dcfd1669f770d2e12704a6fef1a0b8e73b14d10e2317f820984da6479a9d1032a849d32b8a7ca0167d04051721f0d37993cbcc9776d1559a2941da129a7b
SSDEEP

3072:0RUQ+NEoF5fv5ge6bKXB0J/ucU6Lx2mjndjlnONU:0lOFFveevouc/5nNRON

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6eea2409dd60226e235eabb0484cbfdc_JaffaCakes118

Files

6eea2409dd60226e235eabb0484cbfdc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d203bfde36fe4a2494eefe13ffd6c6f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaCastObj
__vbaErrorOverflow
__vbaAryRecCopy

user32

EndDialog
EndDeferWindowPos
DrawTextA
CreateMDIWindowA
GetDC
LoadCursorA

advapi32

LsaDelete
LsaEnumeratePrivileges
LsaEnumeratePrivilegesOfAccount
LsaEnumerateTrustedDomains
LsaGetRemoteUserName
LsaICLookupNames
LsaICLookupSids
LsaLookupNames
RegEnumKeyA
RegOpenKeyExA
RegQueryValueA
LsaCreateTrustedDomain
LsaCreateSecret
LsaCreateAccount
LsaClose
LsaEnumerateAccountRights

kernel32

GetStartupInfoA
GetACP
GetCommandLineA
GetFileSize
lstrlenA
lstrcpynA
VirtualAlloc
SetUnhandledExceptionFilter
LoadResource
GetSystemTimeAsFileTime
EnumResourceLanguagesA

dinput

DirectInputCreateEx

Exports

Exports

Aacirk
Aqvk
Ascbvqmhlt
Auhzmlm
Auxwxoathu
Bcbfwcfedlq
Biwjshajxzg
Bkzbnjx
Bwkmhosow
Coiw
Cpphyp
Cuuvdgyzhve
Dsicezhkx
Dxrkndwm
Dzjbj
Eaodvxgs
Efpgjpmi
Fepw
Fllv
Fmfiqjdvsh
Fnnwjo
Haxpdey
Hhvnkaj
Hixclbvzdnx
Hqgxzsckcra
Hwgxtsn
Hzrfyqlbw
Ijhhcnfu
Imxkedtqsg
Iyqpqv
Jjjupacw
Jyaqeyjyev
Jzulllve
Kaukgmod
Kgpolponev
Kwkje
Kzsllhbl
Lkcewreui
Lwijuoaut
Lyahfq
Mdgrkpg
Mnzk
Mrcf
Multytlwf
Njlvtbc
Nkgtha
Nuzjmudn
Nxupjrgdrv
Ocqlezcgftn
Oksoeigc
Papjipgdl
Pbahlcxbxa
Pdkelgr
Pkew
Pnvn
Pphgkxin
Qgyqgfwwy
Qohgbc
Rwbygzoeear
Sqatan
Tdxqrjyyndi
Tedvfrxzvlc
Tgqogmmsax
Tkir
Tvowj
Tvxrcrsx
Uepbjmk
Unfi
Unwu
Uqxsxllr
Usekfoq
Vxygttaeix
Wbawecfkgua
Wbxf
Wepsq
Wpgmggf
Wpiozrgghhr
Wwlrsrbjtq
Wxedordud
Wzyw
Xbpft
Xkvye
Xoecpzby
Xyqw
Xzfaz
Ygpbrzp
Yhejvo
Yiwnqs
Ylllzmqc
Yxzpbydd
Zipqcsz
Zitbgjspm

Sections

.text
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d203bfde36fe4a2494eefe13ffd6c6f

Headers

File Characteristics

Imports

msvbvm60

user32

advapi32

kernel32

dinput

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 28KB

.rdata Size: 50KB - Virtual size: 52KB

.data Size: 69KB - Virtual size: 72KB

.idata Size: 3KB - Virtual size: 4KB

.rsrc Size: 23KB - Virtual size: 24KB

.text
Size: 25KB - Virtual size: 28KB

.rdata
Size: 50KB - Virtual size: 52KB

.data
Size: 69KB - Virtual size: 72KB

.idata
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 23KB - Virtual size: 24KB