15c25c51a031b3239679710dbdfad33e_JaffaCakes118

General

Target

15c25c51a031b3239679710dbdfad33e_JaffaCakes118
Size

52KB
MD5

15c25c51a031b3239679710dbdfad33e
SHA1

7b4dbb7b15dfab2f0c81df433c5cc8468f14bc72
SHA256

61bb2725d71536f16f1a7722dfa72eff9b9c6c78f41f9c99355fbced852b020e
SHA512

ac9e667a892b4cb0c29f17ac9de2fa9fe3b6da1d4c2a4bf54bba04ca25644a3b951e108ccbe4c2c4263edc737b9d834fd65ed970983eaf718c497e823b19b468
SSDEEP

768:7+9yDEPrY+FQ30adKNMF0zibamGcqpcHBgi/LV851AlIBomnxw8QQAJ1:7yyWrY+O0asNw1VGc+cu+ZQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15c25c51a031b3239679710dbdfad33e_JaffaCakes118

Files

15c25c51a031b3239679710dbdfad33e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88dc4f5dabb391222f2baf0ccd9a3a02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
GetFileSize
GetModuleHandleA
SetFileAttributesA
GetTickCount
IsBadCodePtr
GetCommandLineA
EnterCriticalSection
ResetEvent
ReleaseMutex
DeleteFileA
CloseHandle
GetEnvironmentVariableA
GetExitCodeThread
ResumeThread
HeapSize
GetCurrentDirectoryA
CreateFileA
ExitProcess
VirtualAlloc
FindVolumeClose
HeapDestroy
FindAtomA
FindVolumeClose
SetEndOfFile

wininet

FtpFindFirstFileA
FtpDeleteFileA
HttpEndRequestA
FtpPutFileA
DeleteUrlCacheEntryA
FtpCreateDirectoryW
HttpQueryInfoA
FtpGetFileW
FtpGetCurrentDirectoryW
FtpOpenFileA
DeleteUrlCacheEntryA
FindCloseUrlCache
DeleteUrlCacheEntryA

sisbkup

SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ebwwmpn
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

88dc4f5dabb391222f2baf0ccd9a3a02

Headers

File Characteristics

Imports

kernel32

wininet

sisbkup

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 47KB - Virtual size: 75KB

ebwwmpn Size: - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 47KB - Virtual size: 75KB

ebwwmpn
Size: - Virtual size: 4KB