460fe235cd1fe641d9610128917feccb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

460fe235cd1fe641d9610128917feccb_JaffaCakes118
Size

165KB
MD5

460fe235cd1fe641d9610128917feccb
SHA1

03da86e7b35e960283a64290656c73d781564b04
SHA256

a85b1c90c53adf9d35895c9e97c279d62c4f7ced8b9f9b6230501df6a01fda20
SHA512

1ca8258c1ddb9d754a131e8c4b8d4a6241a6e5acdc4623ebee1534c553c69ede63c18009bca21e89e6df8e050a98ba9f6eb4eaccdadb3ec7957d079a03c8d3ce
SSDEEP

3072:NbGmB2Rgg6PEj6ZnjkVcM6KjqAmHHex4dszTLn2:tTg6PEOpHFKCHHex4dszTC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
460fe235cd1fe641d9610128917feccb_JaffaCakes118

Files

460fe235cd1fe641d9610128917feccb_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a4b5180a8d4396d21111663fc9b3e49e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

__vbaFileSeek
__vbaCyStr
__vbaCheckTypeVar

user32

OemToCharW
LoadMenuA
EndPaint
SetFocus
CreateIconFromResource
CreateCursor
CopyImage
CloseWindow
DeleteMenu

kernel32

EnumResourceNamesA
FindResourceA
ExitThread
EnumResourceLanguagesW
lstrcpyA
lstrcmpiA
TlsAlloc
Sleep
SetLastError
ReadFile
RaiseException
MapViewOfFile
GetVersion
CompareStringA
GetSystemTimeAsFileTime

dinput

DirectInputCreateW

Exports

Exports

Bvyu
Lpucedirjcl

Sections

.text
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ