2b6b8289b18b2b350489bc2878089de5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b6b8289b18b2b350489bc2878089de5_JaffaCakes118
Size

28KB
MD5

2b6b8289b18b2b350489bc2878089de5
SHA1

dbadcee5f9d8e6932f616f9ebf0b4772ba4f379b
SHA256

37f25ecf345c26acf918cb92de7e6429bef8fade83242652b4c2885bd9a10f9d
SHA512

f12d4f5ab137e67cfb4f9a1bc8806099dd8822e6115fe5bfa6377c985dffdcebddf7f2f058d4f7329aacec77f3c1e9680064d1f51421343df5871c01ba66977b
SSDEEP

384:v75JH9HFE7kv3Fhm0aP/iT8BB2onW5wfnRcB3OQ8E03HJAeWzFUKZa:LE7Ozm038vnWgnRcBeQ8rCzpUKk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b6b8289b18b2b350489bc2878089de5_JaffaCakes118

Files

2b6b8289b18b2b350489bc2878089de5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2686c8ad4c4a01f02aa8b633a611ae3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
EnterCriticalSection
ExitProcess
ExitThread
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
LeaveCriticalSection
OpenFileMappingA
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TlsGetValue
VirtualAlloc
lstrcatA
lstrcmpA

user32

EndPaint
CloseWindow
CharUpperBuffA
EqualRect

advapi32

LsaGetRemoteUserName
LsaICLookupSids
LsaLookupNames
RegEnumKeyA
RegOpenKeyExA
LsaEnumeratePrivilegesOfAccount
LsaEnumeratePrivileges
LsaEnumerateAccountRights
LsaDeleteTrustedDomain

msvbvm60

__vbaDateStr
__vbaEraseKeepData
__vbaCyUI1
__vbaCyFix
__vbaCyErrVar
__vbaCopyBytesZero
__vbaAryVarVarg
__vbaAryConstruct2

dinput

DirectInputCreateA
DirectInputCreateW
DirectInputCreateEx

Exports

Exports

Woycd
Wspkughcocw

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ