a24dd099e93adeff83c3e2570189b752_JaffaCakes118

General

Target

a24dd099e93adeff83c3e2570189b752_JaffaCakes118
Size

151KB
MD5

a24dd099e93adeff83c3e2570189b752
SHA1

091f5af7cbe1c39f0c4de6b47310b0beafaffb1c
SHA256

c844ed4888741023dd0098a0e57453275a466c699e2747450145e2bbfa049d6b
SHA512

6de3dc52d0025dffd8ff6b4d91fdfc224247f4ea52287983c995ba4893ff3d1ad0d455cb84c17a7daf4470bb5925a60ec32cbded0f107a5fd860f73243527044
SSDEEP

3072:hrNuvxWc1UkWmSQjNBtY+ybwBqIAAIAuNoUgumJl/NayodU+uk1RngetLM:hMvxWQUkWmJc+VBqIAdAuW7Jl/Nayoso

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a24dd099e93adeff83c3e2570189b752_JaffaCakes118

Files

a24dd099e93adeff83c3e2570189b752_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7384e4d01a995a7f27bd1ed6e031371

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaErase
__vbaEnd
__vbaDateVar
__vbaCyVar
__vbaCySgn
__vbaCyMul
__vbaCyI2
__vbaCyAbs
__vbaCheckTypeVar
__vbaCastObjVar
__vbaCastObj
__vbaAryVar
__vbaAryRebase1Var

kernel32

EnumResourceNamesA
lstrlenA
lstrcatA
VirtualFree
TlsAlloc
SetUnhandledExceptionFilter
SetLastError
SetCurrentDirectoryA
LeaveCriticalSection
GetStartupInfoA
GetModuleHandleA
GetLocalTime
GetCommandLineA
FlushFileBuffers
CloseHandle
ExitProcess

advapi32

LsaFreeMemory
RegOpenKeyExA
LsaGetRemoteUserName
LsaEnumerateAccountsWithUserRight

user32

IsCharLowerA
EndPaint
ActivateKeyboardLayout
GetWindowTextA

ole32

OleInitialize
CoInitialize
CoGetMalloc
OleUninitialize
CoGetClassObject
CoCreateGuid
CoUninitialize
CoCreateInstance

wininet

HttpEndRequestA
FindFirstUrlCacheEntryA
FindCloseUrlCache

dsound

DirectSoundCaptureCreate8
DirectSoundCaptureEnumerateW
DirectSoundCaptureEnumerateA

msvfw32

ICOpen
ICMThunk32
ICInstall
DrawDibStart
DrawDibSetPalette

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7384e4d01a995a7f27bd1ed6e031371

Headers

File Characteristics

Imports

msvbvm60

kernel32

advapi32

user32

ole32

wininet

dsound

msvfw32

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 47KB - Virtual size: 48KB

.data Size: 69KB - Virtual size: 96KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 47KB - Virtual size: 48KB

.data
Size: 69KB - Virtual size: 96KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB