32503cf21bd961cfe913ce652a03f9c9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

32503cf21bd961cfe913ce652a03f9c9_JaffaCakes118
Size

324KB
MD5

32503cf21bd961cfe913ce652a03f9c9
SHA1

00856df6b5d09767df2391aa0ebbc46205144c5a
SHA256

aa96795289f79d0cf8197b77bde8a139b51cbe9ff296cb61f12065d3581a1117
SHA512

01d4e31bc897d5711be1549f3b59a4e8b86263e67e9ecb6afc509e3756a4a6cb9f1464da5d4969f060e9d1b092a93113d72339cc1e3f1dd1a91d698c2cc6acfa
SSDEEP

1536:Z6RjcJSPNsiDNI5JlNhSMRbiLMQ0qRRMIuWNHOpN6B5x/5WMgnCKTPj:ECS5MJlNhSMRbAyqRDHOpUJgvPj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32503cf21bd961cfe913ce652a03f9c9_JaffaCakes118

Files

32503cf21bd961cfe913ce652a03f9c9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1132868b0b4928fd8418c9f89f15cee9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

StrokePath
Pie

msvcrt

clock
ispunct

mprapi

MprConfigTransportSetInfo
MprAdminUserGetInfo

advapi32

AddUsersToEncryptedFile
RegSetKeySecurity
AreAnyAccessesGranted
CreateServiceW
CryptDestroyKey
DeleteAce

pdh

PdhEnumObjectsHW

ole32

MkParseDisplayName
HICON_UserFree
OleGetIconOfClass

msacm32

acmDriverID

shlwapi

PathCompactPathExW
AssocQueryStringA
PathFindExtensionW
StrRStrIA
PathRemoveBlanksW
PathGetArgsW

esent

JetDelete
JetRollback

winspool.drv

AddPrinterDriverW
SetPrinterDataExW

shell32

ShellExecuteA
DuplicateIcon

urlmon

CreateAsyncBindCtx

mscms

DisassociateColorProfileFromDeviceW

cfgmgr32

CM_Get_Parent

rasapi32

RasGetConnectStatusA

winmm

waveInGetID
midiInUnprepareHeader

user32

ReleaseCapture
GetGUIThreadInfo
wsprintfA
SetSysColors
DrawIcon
FillRect
GetMenuDefaultItem
ShowCursor
GetClassNameW
CreateDesktopW
GetClipboardData
SetScrollRange
SetMenuInfo
FindWindowExW
WinHelpA
PtInRect
OpenInputDesktop
GetWindowPlacement

oleaut32

QueryPathOfRegTypeLi
SafeArrayCreateEx
VarCyFromDate
GetErrorInfo

ws2_32

getsockname
htonl

comctl32

DestroyPropertySheetPage

iphlpapi

GetInterfaceInfo

crypt32

CryptMsgUpdate

netapi32

NetFileGetInfo

kernel32

GlobalDeleteAtom
FindFirstFileExA
HeapFree
FlsFree
CancelIo
DuplicateHandle
GetBinaryTypeA
FindNextFileW
SetFileApisToOEM
WaitForSingleObjectEx
LockFile
FlsGetValue
LoadLibraryW
GetSystemWindowsDirectoryW
IsWow64Process

winscard

g_rgSCardT0Pci
SCardGetProviderIdA

rpcrt4

I_RpcBindingInqLocalClientPID
I_RpcServerInqLocalConnAddress
NdrConformantArrayBufferSize
NdrInterfacePointerBufferSize
RpcMgmtEpEltInqBegin

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 713B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bT
Size: 20KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

D
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt0
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cji8
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1132868b0b4928fd8418c9f89f15cee9

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

msvcrt

mprapi

advapi32

pdh

ole32

msacm32

shlwapi

esent

winspool.drv

shell32

urlmon

mscms

cfgmgr32

rasapi32

winmm

user32

oleaut32

ws2_32

comctl32

iphlpapi

crypt32

netapi32

kernel32

winscard

rpcrt4

Sections

.text Size: 104KB - Virtual size: 102KB

.rdata Size: 4KB - Virtual size: 713B

.bT Size: 20KB - Virtual size: 21KB

.idata Size: 8KB - Virtual size: 5KB

D Size: 76KB - Virtual size: 73KB

.crt0 Size: 52KB - Virtual size: 51KB

cji8 Size: 24KB - Virtual size: 23KB

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 104KB - Virtual size: 102KB

.rdata
Size: 4KB - Virtual size: 713B

.bT
Size: 20KB - Virtual size: 21KB

.idata
Size: 8KB - Virtual size: 5KB

D
Size: 76KB - Virtual size: 73KB

.crt0
Size: 52KB - Virtual size: 51KB

cji8
Size: 24KB - Virtual size: 23KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 8KB - Virtual size: 4KB