3eb729c70222cfa047381c44d366d462_JaffaCakes118

General

Target

3eb729c70222cfa047381c44d366d462_JaffaCakes118
Size

149KB
MD5

3eb729c70222cfa047381c44d366d462
SHA1

96616ded8866fafb2894d3aba05c40c36f3a33bb
SHA256

b79d7a7c99a43d64377e390784fe42c10f9a619a4065fcf51babb2d1ce583cd4
SHA512

5a744489e92d702c82eade73884707b40d0d12cb082fac79be2fd695ca8a15f7a22c46659365cbb4ce8d2dd9abe24348bf02b29b2908a534d72730351d36e6a7
SSDEEP

3072:AhJ+cGcQJz3zcVOueZAM+/GT8BH5b+o1ee:OEcGcQFc0u0AM++QBHr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eb729c70222cfa047381c44d366d462_JaffaCakes118

Files

3eb729c70222cfa047381c44d366d462_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b7384e4d01a995a7f27bd1ed6e031371

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

__vbaErase
__vbaEnd
__vbaDateVar
__vbaCyVar
__vbaCySgn
__vbaCyMul
__vbaCyI2
__vbaCyAbs
__vbaCheckTypeVar
__vbaCastObjVar
__vbaCastObj
__vbaAryVar
__vbaAryRebase1Var

kernel32

EnumResourceNamesA
lstrlenA
lstrcatA
VirtualFree
TlsAlloc
SetUnhandledExceptionFilter
SetLastError
SetCurrentDirectoryA
LeaveCriticalSection
GetStartupInfoA
GetModuleHandleA
GetLocalTime
GetCommandLineA
FlushFileBuffers
CloseHandle
ExitProcess

advapi32

LsaFreeMemory
RegOpenKeyExA
LsaGetRemoteUserName
LsaEnumerateAccountsWithUserRight

user32

IsCharLowerA
EndPaint
ActivateKeyboardLayout
GetWindowTextA

ole32

OleInitialize
CoInitialize
CoGetMalloc
OleUninitialize
CoGetClassObject
CoCreateGuid
CoUninitialize
CoCreateInstance

wininet

HttpEndRequestA
FindFirstUrlCacheEntryA
FindCloseUrlCache

dsound

DirectSoundCaptureCreate8
DirectSoundCaptureEnumerateW
DirectSoundCaptureEnumerateA

msvfw32

ICOpen
ICMThunk32
ICInstall
DrawDibStart
DrawDibSetPalette

Sections

.text
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7384e4d01a995a7f27bd1ed6e031371

Headers

File Characteristics

Imports

msvbvm60

kernel32

advapi32

user32

ole32

wininet

dsound

msvfw32

Sections

.text Size: 23KB - Virtual size: 24KB

.rdata Size: 46KB - Virtual size: 48KB

.data Size: 69KB - Virtual size: 96KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 23KB - Virtual size: 24KB

.rdata
Size: 46KB - Virtual size: 48KB

.data
Size: 69KB - Virtual size: 96KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB