f1a885a4ec229b9649e0b5ee349e548f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1a885a4ec229b9649e0b5ee349e548f_JaffaCakes118
Size

14KB
MD5

f1a885a4ec229b9649e0b5ee349e548f
SHA1

8dc666b795581b4313846d8f6f01ce24493be4f8
SHA256

4991d4f8e07eb5b87f6efb3ada3c6d07e4d16e93a00441f158003e1eb8407c94
SHA512

7037c9225742c21ecff06abaf93388043925d3935d8f66c901fd396a87f349a9ec55125912ac3a59d2c1de76815868126d1bf0758cae97481d2b45ae23887512
SSDEEP

384:tQmAYRWCbnApNuZUQmDb/bxmAKUzCaRTwrsD2/r:tQAzntGb/NmAKUR0oD2/r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Easy Account CoD4/EasyAccount.exe

Files

f1a885a4ec229b9649e0b5ee349e548f_JaffaCakes118
.rar
Easy Account CoD4/Directions.txt
Easy Account CoD4/EasyAccount.exe
.exe windows:4 windows x86 arch:x86

5a4c62537343894ae34b0e239010f4ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord519
ord595
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord537
ord645
ord573
ord578
ord100
ord617
ord619

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Easy Account CoD4/ReadMe.txt
Easy Account CoD4/oldplayerstats.txt
Easy Account CoD4/playerstats.txt