b57d6eff0f1f12f7cdddaac8b81c66e7_JaffaCakes118

General

Target

b57d6eff0f1f12f7cdddaac8b81c66e7_JaffaCakes118
Size

55KB
MD5

b57d6eff0f1f12f7cdddaac8b81c66e7
SHA1

f52de81cd6e489b6b601e3adb703def2a58b9610
SHA256

8760b39ecc512f8ed024596a72da8c6e802bc776918e667bde0e4ec47f916d42
SHA512

9bfcb32d221e2a6dcf990415d3943820e9114be817c3b1b666f16c720b92765fb4956637eeeeb9ba55c96b0b5cb9db56d147fc469af1a3869b1974a0af19d532
SSDEEP

768:XWDs2RArGjht9ZBW99Uoar9BeqmUP0LCs336DP75mAFfetX/p2dC5Ew/v3:XWQ2SilTw9Uzr9BRmCs6zAGq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b57d6eff0f1f12f7cdddaac8b81c66e7_JaffaCakes118

Files

b57d6eff0f1f12f7cdddaac8b81c66e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d5fa087e3fb09e4fbbebaf51f2a576f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaCVarAryUdt
__vbaAryVarVarg
__vbaAryLock

user32

EndDialog
OemToCharBuffA
CreateIcon
CharUpperBuffA
BeginPaint
CreateMDIWindowA
LoadBitmapA

advapi32

RegQueryValueA
RegCloseKey
LsaLookupPrivilegeDisplayName
LsaICLookupNames
LsaEnumeratePrivilegesOfAccount
LsaEnumerateAccounts
LsaDeleteTrustedDomain
LsaDelete
LsaCreateTrustedDomainEx
LsaCreateSecret
LsaClose

kernel32

ExitProcess
GetACP
FindResourceA
EnumResourceLanguagesW
lstrlenA
lstrcpynA
lstrcmpiA
VirtualFree
VirtualAlloc
TlsGetValue
TlsFree
TlsAlloc
SleepEx
SetUnhandledExceptionFilter
SetEndOfFile
RtlUnwind
MapViewOfFile
LocalAlloc
GetVersion
GetTimeFormatA
GetStartupInfoA
GetOEMCP
GetModuleHandleA
CloseHandle
GetCommandLineA

dinput

DirectInputCreateEx

Exports

Exports

Bgjvrxan
Dc
Dvrzsmv
Gjlsajldzr
Kxhldwlfpiq
Qmflwrlnkuc
Rolqwd
Tfnizaoijos
Urmm
Xhcohdpx
Zswoqensgm

Sections

.text
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d5fa087e3fb09e4fbbebaf51f2a576f

Headers

File Characteristics

Imports

msvbvm60

user32

advapi32

kernel32

dinput

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 16KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 12KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 19KB - Virtual size: 20KB

.text
Size: 13KB - Virtual size: 16KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 12KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 19KB - Virtual size: 20KB