aef83f141a5580cda836585702f5b7c5_JaffaCakes118 | Triage

Sharing

General

Target

aef83f141a5580cda836585702f5b7c5_JaffaCakes118
Size

165KB
MD5

aef83f141a5580cda836585702f5b7c5
SHA1

29edaa1938f558c4b2a338d5ee5ed57fc21dead6
SHA256

305979720f2d902ea523afb9b8a894075c1bfa9c495581ccbb4207e61cc25688
SHA512

ad973ab9a7077374a6d69a19ac6fc2a18a251349b7887322beccf23543a1d4d445ea515ad5463fd2f3ed529b6d14780962419315459083903537b1dd01c49485
SSDEEP

3072:mbGmB2Rgg6PEj6ZnjkVcM6KjqAmHHex4dszTLn2:YTg6PEOpHFKCHHex4dszTC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aef83f141a5580cda836585702f5b7c5_JaffaCakes118

Files

aef83f141a5580cda836585702f5b7c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4b5180a8d4396d21111663fc9b3e49e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaFileSeek
__vbaCyStr
__vbaCheckTypeVar

user32

OemToCharW
LoadMenuA
EndPaint
SetFocus
CreateIconFromResource
CreateCursor
CopyImage
CloseWindow
DeleteMenu

kernel32

EnumResourceNamesA
FindResourceA
ExitThread
EnumResourceLanguagesW
lstrcpyA
lstrcmpiA
TlsAlloc
Sleep
SetLastError
ReadFile
RaiseException
MapViewOfFile
GetVersion
CompareStringA
GetSystemTimeAsFileTime

dinput

DirectInputCreateW

Exports

Exports

Bvyu
Lpucedirjcl

Sections

.text
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ