c83527bcd7965099552d95df81ee7af9_JaffaCakes118

General

Target

c83527bcd7965099552d95df81ee7af9_JaffaCakes118
Size

16KB
MD5

c83527bcd7965099552d95df81ee7af9
SHA1

5a1681cfe65b166f61a081dd4ba217e657d3421c
SHA256

35b1ef5bab42cb7b3df71f132ac8530851f589c5494c93c6f1857bd440508e77
SHA512

093b76facd599ec660931028e8e9301b2662466024202ae8255c711bb01faef6b67af724a07f58880367f75e0f793cbc153ab206cf04b20adbe6e1faa5d98096
SSDEEP

384:DxPjK82pI+KjF+428N44h8lIDcReycKeQYD:DV2z0ja4+lNRenKT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c83527bcd7965099552d95df81ee7af9_JaffaCakes118

Files

c83527bcd7965099552d95df81ee7af9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

29d7cab360c18f69c0d65d60839c3fa4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringA
Sleep
LoadLibraryA
WriteProcessMemory
ExitThread
CreateThread
GetFileSize
ReadFile
CreateProcessA
GetProcAddress
GetModuleHandleA
ReadProcessMemory
GetSystemDirectoryA
Thread32Next
TerminateThread
Thread32First
CloseHandle
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot

user32

GetMessageA
CallNextHookEx
SetWindowsHookExA
DispatchMessageA
TranslateMessage

ws2_32

gethostbyname
WSAStartup
socket
htons
connect
send
closesocket
WSACleanup
inet_addr

wininet

InternetConnectA
InternetOpenA
InternetCloseHandle
HttpSendRequestA
HttpOpenRequestA
HttpSendRequestW

msvcrt

_except_handler3
malloc
free
sprintf

Exports

Exports

FURONGJIEJIE

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

29d7cab360c18f69c0d65d60839c3fa4

Headers

File Characteristics

Imports

kernel32

user32

ws2_32

wininet

msvcrt

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 1KB

Shared Size: 512B - Virtual size: 348B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 1KB

Shared
Size: 512B - Virtual size: 348B

.reloc
Size: 1KB - Virtual size: 1KB