e23b5f9bfe879398f1aa8a9940810fc0_JaffaCakes118 | Triage

Sharing

General

Target

e23b5f9bfe879398f1aa8a9940810fc0_JaffaCakes118
Size

46KB
MD5

e23b5f9bfe879398f1aa8a9940810fc0
SHA1

576801a96c1370557a5bb8e259bb032fcff19160
SHA256

c6bedb05586a3d728169fdcf253dc5edb1c7405737923627632db07c9e00b165
SHA512

8f16003b02e76059107b70acefe0f24e2168fbfecbebba88542e55e5dcd1d71c92ce0d2388d2520faf50f2b47b1b662779d2ae1101655cc4d925bd8b9929358b
SSDEEP

768:UX3kyhZAUbYmRr+DICXsx5K2z+X3vE/FBGN2EL5wcClRng+QzkZ3Q0:mUGZAUbYmEICK5K2iPoajTCfgu3f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e23b5f9bfe879398f1aa8a9940810fc0_JaffaCakes118

Files

e23b5f9bfe879398f1aa8a9940810fc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0115a3f42493b96d094bf7810fe3a391

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaCyAdd
__vbaCyI4
__vbaCyAbs

user32

wsprintfA
BeginPaint
ChangeMenuA
CharNextA
CharToOemBuffA
DispatchMessageA
EmptyClipboard
EnableMenuItem
MessageBeep
GetWindowTextA

kernel32

OpenFile
Sleep
VirtualAlloc
lstrcatA
GetStartupInfoA

dinput

DirectInputCreateW

ole32

DoDragDrop
OleSetClipboard
OleLockRunning
OleDuplicateData
CreateDataAdviseHolder
CreateBindCtx
CoTaskMemFree
CoRevokeClassObject

oleaut32

SafeArrayPutElement
SafeArraySetIID
VarCyFromStr
VarDecFromUI2
VarI4FromUI1
VarR8FromBool
VarUI2FromBool
VarUI2FromI2
VectorFromBstr
SafeArrayCopy

Sections

.text
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ