b78d0da26e9b633857ed5e10eb0f5c44_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b78d0da26e9b633857ed5e10eb0f5c44_JaffaCakes118
Size

338KB
MD5

b78d0da26e9b633857ed5e10eb0f5c44
SHA1

a13124d0b40e9dbd668207add48210f03ee894a2
SHA256

0203c1986d9873e0ab25dfa75669688624adb1f435d7bf13540300eca9c0c7e9
SHA512

2ec1c510172156ea31e360c18bdc7f126edd68f677163e2bec2c50453b3cf7ee36aa63c180dfd4f5c9dfef527cda7d1040746980a43a4649302c88f726872ab1
SSDEEP

6144:RLNciV7QcBJqzzbBrbDskJ1nVmlt8JKAv:RBHnBErtgklYtI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b78d0da26e9b633857ed5e10eb0f5c44_JaffaCakes118

Files

b78d0da26e9b633857ed5e10eb0f5c44_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf452bbd2ef2d7412ffa8942ead1ab1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

comdlg32

GetOpenFileNameA

dinput

DirectInputCreateA

Sections

.text
Size: 68KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 125KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE