639280fd3aa87de5c59b5463c9a27867_JaffaCakes118

General

Target

639280fd3aa87de5c59b5463c9a27867_JaffaCakes118
Size

10KB
MD5

639280fd3aa87de5c59b5463c9a27867
SHA1

f48560b039eaef95274fd8848a281ddb70a0f1ad
SHA256

b7d2d55c91b7fc65d763531510f3620baa6e8d0f1b566048941d836cff4a8a5f
SHA512

3ca29da05acea2a6db669dd010315482894324ce22c8a3be96407fb0a8d585535a3946725800a265e0af82db8b9c27a78ff94bdc79abedd4895c2f2be39839be
SSDEEP

192:vHqVOlcW5kW+qa+6MulcK/PErSkKq6uNunJbGpOV3PJnG:/q3W5xva+67lcKUekenJKpORFG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CloseSimilar/CloseSimilar.exe

Files

639280fd3aa87de5c59b5463c9a27867_JaffaCakes118
.rar
CloseSimilar/CloseSimilar.exe
.exe windows:4 windows x86 arch:x86

6f480571211aecdec650705c4043f2b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
SetUnhandledExceptionFilter
VirtualProtect
VirtualQuery
lstrcmpW

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memcpy
signal

user32

CreateWindowExW
DefWindowProcW
DispatchMessageW
EnumWindows
FindWindowW
GetClassNameW
GetForegroundWindow
GetMessageW
GetParent
GetWindowLongW
LoadCursorW
LoadIconW
MessageBoxW
PostMessageW
PostQuitMessage
RegisterClassExW
RegisterHotKey
SendMessageW
TranslateMessage

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 96B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CloseSimilar/说明.txt

Sharing

General

Malware Config

Signatures

Files

6f480571211aecdec650705c4043f2b5

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 44B

.rdata Size: 1024B - Virtual size: 576B

.bss Size: - Virtual size: 96B

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 44B

.rdata
Size: 1024B - Virtual size: 576B

.bss
Size: - Virtual size: 96B

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 16KB - Virtual size: 15KB