4155ed018cfbff8c05f3d7eaad5fa980_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4155ed018cfbff8c05f3d7eaad5fa980_JaffaCakes118
Size

782KB
MD5

4155ed018cfbff8c05f3d7eaad5fa980
SHA1

fd9d3fc8273a2d09fcb77ccec3680db015ec2a6d
SHA256

53e23558954fc071ebc32cde81fd4d00d0993952723acab64b6d331ed2a7ebb6
SHA512

6f85bf1612495255c93c34c81815fbf3b99ec0cc3c37a96a2ace959edcb28d713c284b4a4c2e051111b542aa88b4059c5b8ed713f670f7ea6be3267f65970b6c
SSDEEP

24576:9fjc27rFzP2/APyJ80UFXtf33OESCKDs7IDQ/:9cOJy/AW81NnG2l/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AlienShooter2 Conscription v1.0 + 9 Trainer.exe

Files

4155ed018cfbff8c05f3d7eaad5fa980_JaffaCakes118
.rar
AlienShooter2 Conscription v1.0 + 9 Trainer.exe
.exe windows:4 windows x86 arch:x86

08388f226ed1dc056499a21970046556

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

OleUninitialize

comctl32

ImageList_SetIconSize

shell32

Shell_NotifyIconA

comdlg32

GetOpenFileNameA

winmm

PlaySoundA

imagehlp

SymSetSearchPath

Sections

CODE
Size: 760KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
查看最新版本.url
.url
说明.txt