019aac6de167a80bbf5c83c26975f98c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

019aac6de167a80bbf5c83c26975f98c_JaffaCakes118
Size

5.0MB
MD5

019aac6de167a80bbf5c83c26975f98c
SHA1

8a959e5962eeca072add1374ec30e7cb7f7d0ed4
SHA256

5bf87037c12cd8057320eca11aed58cc17811bdbf239e6844fb9104240446651
SHA512

473c536d648aa46bd4b08e034f1693467c9a001f814176f09e87d91d56647a01b7ec52c7c32d7e8614ac872392c05ee8b1b91c78f7d18886ca912c62613eab22
SSDEEP

49152:znAQqMSPbcBVQej/1INRx+TSqTdX1HkQW:TDqPoBhz1aRxcSUDkf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
019aac6de167a80bbf5c83c26975f98c_JaffaCakes118

Files

019aac6de167a80bbf5c83c26975f98c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2e5708ae5fed0403e8117c645fb23e5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateProcessA

msvcrt

free
_initterm
malloc
_adjust_fdiv
sprintf

Exports

Exports

PlayGame

Sections

.text
Size: 4KB - Virtual size: 652B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ