a56dcc374bdbe3646e28c1a87f20362b_JaffaCakes118

General

Target

a56dcc374bdbe3646e28c1a87f20362b_JaffaCakes118
Size

55KB
MD5

a56dcc374bdbe3646e28c1a87f20362b
SHA1

a99145a88518603d844ed3313a1bc606feabfa6b
SHA256

6e14b4b6b9962e6140a7cf66460a8c33e942d9948d013afe7451e07893792922
SHA512

b5ceee6edf402896aa715edad049f02a0794a41c2fb7356ff3439e941237d6c151de27a1682bcfeee1e0be911b3300b78eeabd75cb0444f6462ca9c64fc9782a
SSDEEP

768:MYFLfTY1zIcRNvkPWDJMXiB7JxoaVjvmxa/FJaRAFfet1/p2dC5Ew/v3:MYFaIcRWkJcsXoyjvoQJoGq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a56dcc374bdbe3646e28c1a87f20362b_JaffaCakes118

Files

a56dcc374bdbe3646e28c1a87f20362b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d5fa087e3fb09e4fbbebaf51f2a576f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaCVarAryUdt
__vbaAryVarVarg
__vbaAryLock

user32

EndDialog
OemToCharBuffA
CreateIcon
CharUpperBuffA
BeginPaint
CreateMDIWindowA
LoadBitmapA

advapi32

RegQueryValueA
RegCloseKey
LsaLookupPrivilegeDisplayName
LsaICLookupNames
LsaEnumeratePrivilegesOfAccount
LsaEnumerateAccounts
LsaDeleteTrustedDomain
LsaDelete
LsaCreateTrustedDomainEx
LsaCreateSecret
LsaClose

kernel32

ExitProcess
GetACP
FindResourceA
EnumResourceLanguagesW
lstrlenA
lstrcpynA
lstrcmpiA
VirtualFree
VirtualAlloc
TlsGetValue
TlsFree
TlsAlloc
SleepEx
SetUnhandledExceptionFilter
SetEndOfFile
RtlUnwind
MapViewOfFile
LocalAlloc
GetVersion
GetTimeFormatA
GetStartupInfoA
GetOEMCP
GetModuleHandleA
CloseHandle
GetCommandLineA

dinput

DirectInputCreateEx

Exports

Exports

Bgjvrxan
Dc
Dvrzsmv
Gjlsajldzr
Kxhldwlfpiq
Qmflwrlnkuc
Rolqwd
Tfnizaoijos
Urmm
Xhcohdpx
Zswoqensgm

Sections

.text
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d5fa087e3fb09e4fbbebaf51f2a576f

Headers

File Characteristics

Imports

msvbvm60

user32

advapi32

kernel32

dinput

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 16KB

.rdata Size: 11KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 12KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 19KB - Virtual size: 20KB

.text
Size: 13KB - Virtual size: 16KB

.rdata
Size: 11KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 12KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 19KB - Virtual size: 20KB