995e6c77a2a8bb704b50f76e9a2d6b9b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

995e6c77a2a8bb704b50f76e9a2d6b9b_JaffaCakes118
Size

27KB
MD5

995e6c77a2a8bb704b50f76e9a2d6b9b
SHA1

415582586a8bb53e813de013ec7ee8d65b39829a
SHA256

20fd1cbfe8f840222cb6f9ebea4e7a496deeec74f021e61979cb514b9c63f8b1
SHA512

a0d9d5b0c8120e47d913cbfedb143ddc7f0bc45fa3f67f5fe8f0196df982f26b14e99952cbcf4093db1138c8a92c09aeac3532eb861222a5363fe932d8b99083
SSDEEP

768:XI0rwHvcew0pDEzyAmgGrGxKJXi1AUVC9t7GUK3AsT:XmH0eNDfgG6xKJXi1APr7GUK3AY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TrnSufferingTTB.exe

Files

995e6c77a2a8bb704b50f76e9a2d6b9b_JaffaCakes118
.zip
TrnSufferingTTB.exe
.exe windows:4 windows x86 arch:x86

dadb335a5e9c6826209531b3457131c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

advapi32

LookupPrivilegeValueA

user32

SetTimer

comctl32

ord17

comdlg32

GetOpenFileNameA

Sections

pec1
Size: 23KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gameguru.nfo
readme.txt