53606881d4f8b4934c5ade1947e88bc9_JaffaCakes118 | Triage

Resubmissions

18-05-2024 08:15

240518-j5t3lsbc4v 10

18-05-2024 07:00

240518-hstqmsgg9w 10

18-05-2024 06:28

240518-g8smvafg7y 10

Sharing

General

Target

53606881d4f8b4934c5ade1947e88bc9_JaffaCakes118
Size

5.0MB
MD5

53606881d4f8b4934c5ade1947e88bc9
SHA1

5588e92d9be1ced63f3f9c6514a1a4a0ed90995e
SHA256

554f9a45ff13004de1e16fab4be1e467374f940a963cc9ce65d2906f0c54857a
SHA512

d431c39be859d8ce73c2e12a5cbf6d538540fdb9811b85cc65fde9bb2e3336ab3af5e80f6cf77c10a768e3f45cc8b699980f9a04bb909c3238be5d0ad853948e
SSDEEP

98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9yLGp2H:+DqPe1Cxcxk3ZAEUaYS4H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
53606881d4f8b4934c5ade1947e88bc9_JaffaCakes118

Files

53606881d4f8b4934c5ade1947e88bc9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2e5708ae5fed0403e8117c645fb23e5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateProcessA

msvcrt

free
_initterm
malloc
_adjust_fdiv
sprintf

Exports

Exports

PlayGame

Sections

.text
Size: 4KB - Virtual size: 652B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ