4183ba0d2fb369594abe992da99f089e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4183ba0d2fb369594abe992da99f089e_JaffaCakes118
Size

44KB
MD5

4183ba0d2fb369594abe992da99f089e
SHA1

bddf9c46266b5d690e0b6632310f12e4c5aae868
SHA256

6fe1c0ce3b618e4210fef3b81f73553bc00f485e1c2f21ddd964b158d0499b15
SHA512

4725a0fb5e1b89576a4e6e89cade8a1cac11f1f9db4b2f868796741804987a6df7fef4ee579aa19630ea05730625e28b41a3cc6dc35dda96fb299e16e0ac4051
SSDEEP

768:xIa3H8HMfax3VknRom4VmnktkC/zFZjs2dLVKmh8kZ3Q0:xItZgb4V/tkuTjndL0mt3f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4183ba0d2fb369594abe992da99f089e_JaffaCakes118

Files

4183ba0d2fb369594abe992da99f089e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0115a3f42493b96d094bf7810fe3a391

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

__vbaCyAdd
__vbaCyI4
__vbaCyAbs

user32

wsprintfA
BeginPaint
ChangeMenuA
CharNextA
CharToOemBuffA
DispatchMessageA
EmptyClipboard
EnableMenuItem
MessageBeep
GetWindowTextA

kernel32

OpenFile
Sleep
VirtualAlloc
lstrcatA
GetStartupInfoA

dinput

DirectInputCreateW

ole32

DoDragDrop
OleSetClipboard
OleLockRunning
OleDuplicateData
CreateDataAdviseHolder
CreateBindCtx
CoTaskMemFree
CoRevokeClassObject

oleaut32

SafeArrayPutElement
SafeArraySetIID
VarCyFromStr
VarDecFromUI2
VarI4FromUI1
VarR8FromBool
VarUI2FromBool
VarUI2FromI2
VectorFromBstr
SafeArrayCopy

Sections

.text
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ