32d93e27a85c49b4db543bdcb716bf5f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

32d93e27a85c49b4db543bdcb716bf5f_JaffaCakes118
Size

1.2MB
MD5

32d93e27a85c49b4db543bdcb716bf5f
SHA1

2d6cee994385c98955381d937e1f7d87027db8f6
SHA256

c26a9eb1c3efa68f81620c999dcf0b4f908194a57b312c56497910296b0027e0
SHA512

eb4a7e5ec2a70966980f9bb990c955228da2d57ef7ca7c55c5af9ce6aeb57216b1ce1c3d430b8fff5bb76c05c56dab858a5b8136081bd79a7ad71c7b830c40fe
SSDEEP

24576:EB3OrATRS2DRnq+GG1hjiAfbaCghgPuEPyJORN/3lO:mVdhFGGjGGPdaI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32d93e27a85c49b4db543bdcb716bf5f_JaffaCakes118

Files

32d93e27a85c49b4db543bdcb716bf5f_JaffaCakes118
.exe windows:9 windows x86 arch:x86

4d301afe7620ae1417cd046d89e3bd75

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

TranslateMessage
TrackPopupMenuEx
CheckRadioButton
GetClientRect
SetFocus
EnableMenuItem
GetDlgCtrlID
SetWindowLongA
CloseClipboard
SetDlgItemInt
CheckMenuRadioItem
GetProcessDefaultLayout
SetWindowTextA
SetMenu
BeginPaint
DrawTextA
GetClipboardData
DefWindowProcA
MessageBoxA
SetCursor
CheckMenuItem
GetSysColor
IsClipboardFormatAvailable
EnableWindow
SystemParametersInfoA
SetWindowPos
CheckDlgButton
GetDlgItem
CallWindowProcA
GetWindowLongA
EndDialog
LoadCursorA
DialogBoxParamA
GetDesktopWindow
PostQuitMessage
CharNextA
GetWindowRect
LoadStringA
ShowWindow
DestroyWindow
DestroyMenu
HideCaret
LoadIconA
GetWindowTextA
SendMessageA
EndPaint
SetDlgItemTextA
InvalidateRect
ChildWindowFromPoint
CreateWindowExA
GetMessageA
WinHelpA
MessageBeep
GetMenu
OpenClipboard
LoadAcceleratorsA
UpdateWindow
RegisterClassExA
CreateDialogParamA
OffsetRect
ScreenToClient
DispatchMessageA
TranslateAcceleratorA
GetSubMenu
MapWindowPoints
SetProcessDefaultLayout
GetSysColorBrush
IsDialogMessageA
IsChild
LoadMenuA

advpack

ExecuteCab
TranslateInfStringEx
RegInstall
TranslateInfString
LaunchINFSection
NeedRebootInit
RunSetupCommand
DelNode
NeedReboot
SetPerUserSecValues
ExtractFiles
AddDelBackupEntry
DoInfInstall
CloseINFEngine
DelNodeRunDLL32
FileSaveMarkNotExist
UserUnInstStubWrapper
RegRestoreAll
RegSaveRestoreOnINF
UserInstStubWrapper
AdvInstallFile
RegSaveRestore
FileSaveRestoreOnINF
GetVersionFromFileEx
OpenINFEngine
RebootCheckOnInstall
GetVersionFromFile
FileSaveRestore
RegisterOCX
IsNTAdmin
LaunchINFSectionEx

cryptui

EnrollmentCOMObjectFactory_getInstance
CryptUIDlgViewCertificatePropertiesA
CryptUIGetViewSignaturesPagesA
CryptUIDlgViewCertificateA
CryptUIWizExport
CryptUIDlgViewCRLA
CryptUIDlgViewContext
CryptUIDlgFreeCAContext
CryptUIFreeViewSignaturesPagesA
CryptUIWizCertRequest
LocalEnrollNoDS
CryptUIDlgViewCTLA
CryptUIWizDigitalSign
I_CryptUIProtectFailure
CryptUIDlgSelectCA
ACUIProviderInvokeUI
CryptUIFreeCertificatePropertiesPagesA
CryptUIDlgSelectStoreA
DllRegisterServer
CryptUIDlgSelectCertificateA
LocalEnroll
RetrievePKCS7FromCA
CryptUIDlgSelectCertificateFromStore
CryptUIWizSubmitCertRequestNoDS
CryptUIWizCreateCertRequestNoDS
CryptUIGetCertificatePropertiesPagesA
CryptUIWizImport
WizardFree
DllUnregisterServer
I_CryptUIProtect
CryptUIDlgViewSignerInfoA
CryptUIWizFreeCertRequestNoDS
CryptUIWizFreeDigitalSignContext
CryptUIStartCertMgr
CryptUIWizQueryCertRequestNoDS
CryptUIWizBuildCTL
CryptUIDlgCertMgr

kernel32

InterlockedDecrement
CompareStringA
GetStringTypeA
CreateFileA
ConnectNamedPipe
SystemTimeToFileTime
GetNamedPipeHandleStateA
WaitNamedPipeA
WriteFileEx
lstrlenA
SetFilePointerEx
FileTimeToDosDateTime
lstrcpynA
FileTimeToLocalFileTime
InterlockedPushEntrySList
GetSystemTimeAdjustment
FileTimeToSystemTime
CallNamedPipeA
TransactNamedPipe
InterlockedExchange
GetLastError
SetEnvironmentVariableA
GetFileTime
lstrcatA
ReadFileEx
GetFileAttributesExA
PeekNamedPipe
CloseHandle
GetEnvironmentStringsA
OpenMutexA
GetLocalTime
WriteFile
ReadFile
GetNamedPipeInfo
lstrcpyA
InterlockedIncrement
GetStringTypeExA
VirtualAlloc
GetEnvironmentVariableA
ReadFileScatter
GetSystemTimes
InterlockedCompareExchange
GetProcessHeaps
ReleaseMutex
DosDateTimeToFileTime
InterlockedFlushSList
SetNamedPipeHandleState
IsBadStringPtrA
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
WriteFileGather
InterlockedExchangeAdd
SetFilePointer
FreeEnvironmentStringsA
GetSystemTime
DeleteFileA
SetFirmwareEnvironmentVariableA
GetCurrentProcessId
CreateMutexA
InterlockedPopEntrySList
VirtualFree
DisconnectNamedPipe
GetSystemTimeAsFileTime
GetFileAttributesA
GetFirmwareEnvironmentVariableA
HeapCreate

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d301afe7620ae1417cd046d89e3bd75

Headers

DLL Characteristics

File Characteristics

Imports

user32

advpack

cryptui

kernel32

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.data Size: 38KB - Virtual size: 38KB

.rsrc Size: 91KB - Virtual size: 3.2MB

.text
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 38KB - Virtual size: 38KB

.rsrc
Size: 91KB - Virtual size: 3.2MB