30f3c769cd796b784bb7287924ce6f77_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

30f3c769cd796b784bb7287924ce6f77_JaffaCakes118
Size

4.1MB
MD5

30f3c769cd796b784bb7287924ce6f77
SHA1

890405cd4a07f6980b5d1bb36ac1ea36c46d2d1b
SHA256

48be9fca366f73263effa4289892733316aaade603852815e86c3b7efbf0db7f
SHA512

4a8ced38f122cba8a2771b3cb1ae6056664d880f438af16fb5a5748755d4edb4fa5f3714c96d14b30914ccbbf9cf91cd04935ce2300b8c6262ef6346fdc37734
SSDEEP

98304:KvM3RAFsxxrFUY+JzzjqrIfSOVbe8d0INgRXazZ:KvsKFsdUY+JzfiiSOVSHSzzZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Monster Hunter World v163956 +23 Trainer -ManiacKnight.EXE

Files

30f3c769cd796b784bb7287924ce6f77_JaffaCakes118
.rar
Monster Hunter World v163956 +23 Trainer -ManiacKnight.EXE
.exe windows:5 windows x86 arch:x86

8d92fa1956a6a631c642190121740197

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathAddBackslashA
PathStripPathA
PathRemoveFileSpecA

kernel32

GetModuleFileNameA
FindResourceA
GetModuleHandleA
SizeofResource
LoadResource
GetTempPathA
CreateDirectoryA
DeleteFileA
CreateFileA
WriteFile
CloseHandle
CreateProcessA
WaitForSingleObject
RemoveDirectoryA
FlushFileBuffers
GetTempFileNameA
GetCurrentThreadId
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

user32

MessageBoxA

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorA

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18.1MB - Virtual size: 18.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8d92fa1956a6a631c642190121740197

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

advapi32

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 18.1MB - Virtual size: 18.1MB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 18.1MB - Virtual size: 18.1MB

.reloc
Size: 4KB - Virtual size: 3KB