00afb894e2245eb190d35eed1d710c36_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00afb894e2245eb190d35eed1d710c36_JaffaCakes118
Size

108KB
MD5

00afb894e2245eb190d35eed1d710c36
SHA1

ba03c2846e032380ca0ed0ea1adc4f751cda5a36
SHA256

ee51eed405b51d95cd9ee585e1116b925afd9d0aa6434ba3465878965634ba1c
SHA512

ac3f42c2589d64726c45b21ee3261307f4d7d1e856a6e3bfa32c087a3d8aebfd660c75821ca1361764a8e418762821c363e248404328d4f1eb02e95c106ab68c
SSDEEP

3072:0jVNf/R00xy3xRqJBKp9Ek7ePFx9+ZPE2fJUW3zlyERGi:0jV9/R0pp9wF+Z1fuWjMh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00afb894e2245eb190d35eed1d710c36_JaffaCakes118

Files

00afb894e2245eb190d35eed1d710c36_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2686c8ad4c4a01f02aa8b633a611ae3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
EnterCriticalSection
ExitProcess
ExitThread
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
LeaveCriticalSection
OpenFileMappingA
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TlsGetValue
VirtualAlloc
lstrcatA
lstrcmpA

user32

EndPaint
CloseWindow
CharUpperBuffA
EqualRect

advapi32

LsaGetRemoteUserName
LsaICLookupSids
LsaLookupNames
RegEnumKeyA
RegOpenKeyExA
LsaEnumeratePrivilegesOfAccount
LsaEnumeratePrivileges
LsaEnumerateAccountRights
LsaDeleteTrustedDomain

msvbvm60

__vbaDateStr
__vbaEraseKeepData
__vbaCyUI1
__vbaCyFix
__vbaCyErrVar
__vbaCopyBytesZero
__vbaAryVarVarg
__vbaAryConstruct2

dinput

DirectInputCreateA
DirectInputCreateW
DirectInputCreateEx

Exports

Exports

Woycd
Wspkughcocw

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ