367292a917aeb79fef10bc0072242e2a_JaffaCakes118

General

Target

367292a917aeb79fef10bc0072242e2a_JaffaCakes118
Size

52KB
MD5

367292a917aeb79fef10bc0072242e2a
SHA1

49ffaef0c6a7f542c6cc7014134e5ea6068e68b9
SHA256

6fa33ab6c5aa2275f7d2ac4fb46eb2222b2bad1ca594a5319f303db83150c874
SHA512

65e3ece5a5d29fcd781f2a026c22b3dae638d7c74b9f4e14d2132af85acff44b217ea265b29df707a48d8cebc8b998cd9490a9598dfe3c3a54a9a626cd3ba366
SSDEEP

768:B1dKVSslDj/ZcKN2lpxQJHAJqP8K/WDQMQocaidMAbCChEnXCBp99C3Qm:Bdslhc3pxQpAJQ/GQMVtlyBp9k3x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
367292a917aeb79fef10bc0072242e2a_JaffaCakes118

Files

367292a917aeb79fef10bc0072242e2a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

12541812aef338d3c1de6ff3fc73b291

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

MCIWndCreateA
ICGetDisplayFormat
ICDraw
ICCompressorChoose

ole32

CoCreateInstance
CoGetClassObject
ReadClassStg
OleUninitialize
OleInitialize
CoUninitialize
CoRevokeClassObject
CoInitialize

kernel32

ExitProcess
GetStartupInfoA
lstrcatA
SetUnhandledExceptionFilter
GetModuleHandleA
GetCommandLineA
CloseHandle
InitializeCriticalSection

advapi32

LsaICLookupSids
LsaCreateAccount
LsaCreateTrustedDomainEx
LsaCreateTrustedDomain

user32

ActivateKeyboardLayout
CreateDesktopW
RegisterClassA
SetFocus
ShowWindow
MessageBoxA

msvbvm60

__vbaErrorOverflow
__vbaExitEachAry
__vbaErase
__vbaCyErrVar
__vbaChkstk
__vbaFailedFriend
__vbaAryVar
__vbaFileClose
__vbaBoolStr
__vbaEraseKeepData

wininet

InternetCloseHandle
FindNextUrlCacheGroup
InternetCrackUrlA

dsound

DirectSoundCreate8
DirectSoundCaptureEnumerateA
DirectSoundCaptureCreate
DirectSoundCaptureCreate8

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

12541812aef338d3c1de6ff3fc73b291

Headers

File Characteristics

Imports

msvfw32

ole32

kernel32

advapi32

user32

msvbvm60

wininet

dsound

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 10KB - Virtual size: 12KB

.data Size: 14KB - Virtual size: 16KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 10KB - Virtual size: 12KB

.data
Size: 14KB - Virtual size: 16KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB