9706a91b71d6469eee7460c4fe269cd7_JaffaCakes118 | Triage

Sharing

General

Target

9706a91b71d6469eee7460c4fe269cd7_JaffaCakes118
Size

5.0MB
MD5

9706a91b71d6469eee7460c4fe269cd7
SHA1

ac9d010f4350f12ddb11ad027086939d13ebd6df
SHA256

6b554dcb67e00574995e5ba2edd00f3326c269cc37fae2ac9487de0fc64fd2f2
SHA512

1b011ebe840269139465db20b15d4a7d6cc2340dcd8b78d2b03def9e8af8a3bc31e55cf6f0bbb6a7e9ce3d3a700831864407bdc0348b5ad24017cce6f54b060f
SSDEEP

24576:SbLgddQhfdmMSirYbcMNgef0EE7A4kqAH1pNZtA0p+9XEk:SnAQqMSPbcBVZ8yAH1plAH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9706a91b71d6469eee7460c4fe269cd7_JaffaCakes118

Files

9706a91b71d6469eee7460c4fe269cd7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2e5708ae5fed0403e8117c645fb23e5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateProcessA

msvcrt

free
_initterm
malloc
_adjust_fdiv
sprintf

Exports

Exports

PlayGame

Sections

.text
Size: 4KB - Virtual size: 652B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ