jaffacakes118_IM-Flooder[.]Win32[.]DFMA[.]d[.]cc981efec314a118a230cb3de96f79c6

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_IM-Flooder.Win32.DFMA.d.cc981efec314a118a230cb3de96f79c6
Size 44KB
Sample261009-vsd2eada76
SHA256 67669cfb956c7e45eaf80136d5b43590ae5797cae6b9e96a235cd396e9de6a17
MD5 cc981efec314a118a230cb3de96f79c6
SHA1 2c0f9d8affa8618f26a4eb037a1cf2564595aae5
SHA512 44dcb9e4d4d06215620d1d6e23882bffa57d25aa7712a3750cd06c1858731ce83740143386aeec57ca9c3c525b1ff2aef4573c14a36fe3ac8207b54be9577897
SSDEEP 768:0dyuH+wlmuqBO48xYz9uHiy3i3RH/0ddaWk5fJ:0P+aXo9KIWk5f
TLSH
T18313F813B6D642B2D2E4B67814EF2772D633A8590B02CBC357D0CEAD5C37652EAA134D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_IM-Flooder.Win32.DFMA.d.cc981efec314a118a230cb3de96f79c6

File Explorer

jaffacakes118_IM-Flooder.Win32.DFMA.d.cc981efec314a118a230cb3de96f79c6

.exe 44KB

jaffacakes118_IM-Flooder.Win32.DFMA.d.cc981efec314a118a230cb3de96f79c6

IMPHASH c5e846cb8bd326195e4fdb6533c9d0b9
SHA256 67669cfb956c7e45eaf80136d5b43590ae5797cae6b9e96a235cd396e9de6a17
MD5 cc981efec314a118a230cb3de96f79c6
SHA1 2c0f9d8affa8618f26a4eb037a1cf2564595aae5
SHA512 44dcb9e4d4d06215620d1d6e23882bffa57d25aa7712a3750cd06c1858731ce83740143386aeec57ca9c3c525b1ff2aef4573c14a36fe3ac8207b54be9577897
SSDEEP 768:0dyuH+wlmuqBO48xYz9uHiy3i3RH/0ddaWk5fJ:0P+aXo9KIWk5f
TLSH
T18313F813B6D642B2D2E4B67814EF2772D633A8590B02CBC357D0CEAD5C37652EAA134D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21024

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord3136 ord3262 ord2985 ord3081 ord2976 ord4465 ord3830 ord3831 ord3825 ord3079 ord4080 ord4622 ord4424 ord3738 ord561 ord825 ord815 ord641 ord2514 ord2621 ord1134 ord1199 ord1247 ord5265 ord4376 ord4853 ord3147 ord3259 ord6052 ord1775 ord4407 ord5241 ord2385 ord5163 ord6374 ord4353 ord5280 ord3798 ord4837 ord4441 ord2648 ord2055 ord6376 ord3749 ord5065 ord1727 ord5261 ord2446 ord2124 ord5277 ord4627 ord4425 ord3597 ord324 ord2302 ord4998 ord4078 ord1168 ord537 ord5714 ord2982 ord800 ord4160 ord540 ord2863 ord4710 ord2379 ord755 ord470 ord1105 ord3098 ord3095 ord6055 ord1776 ord5290 ord3402 ord3721 ord3619 ord809 ord795 ord2614 ord556 ord567 ord3663 ord3626 ord2414 ord1929 ord4275 ord1088 ord2122 ord1641 ord4673 ord6199 ord3874 ord5875 ord2864 ord5981 ord6358 ord6215 ord858 ord4299 ord3797 ord2859 ord6880 ord941 ord5572 ord2915 ord1200 ord926 ord2818 ord860 ord5199 ord1089 ord3922 ord5731 ord2512 ord2554 ord4486 ord6375 ord4274 ord5289 ord5307 ord4698 ord4079 ord2725 ord5302 ord5300 ord3346 ord2396 ord5953 ord5951 ord4234 ord1146 ord2860 ord1576

msvcrt

_onexit _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit _controlfp __dllonexit rand _itoa atoi strtok sprintf __CxxFrameHandler srand strstr _mbsstr _setmbcp

kernel32

GetPrivateProfileIntA GetTickCount FreeLibrary LoadLibraryA GetWindowsDirectoryA lstrcpyA WinExec lstrlenA lstrcatA GetModuleHandleA GetStartupInfoA GetPrivateProfileStringA WritePrivateProfileStringA

user32

ReleaseCapture PtInRect SetCursor InvalidateRect IsWindow SendDlgItemMessageA ReleaseDC GetDC GetParent GetWindowRect CopyIcon SetDlgItemTextA MessageBeep EnableWindow IsIconic GetSystemMetrics GetClientRect DrawIcon GetSystemMenu AppendMenuA SendMessageA LoadIconA LoadCursorA GetDlgItemTextA SetCapture InflateRect

gdi32

GetStockObject GetObjectA CreateFontIndirectA GetTextExtentPoint32A

advapi32

RegQueryValueA RegCloseKey RegOpenKeyExA

shell32

ShellExecuteA

wsock32

gethostbyname ntohl ntohs connect socket ioctlsocket closesocket select recv send htons htonl