b1e554968c8757ea800b6d6c622c6a07_JaffaCakes118

General

Target
b1e554968c8757ea800b6d6c622c6a07_JaffaCakes118
Size 6.0MB
Sample240616-f1ewcavern
SHA256 9026f8300c35cbc1294e290cedfd94dab0d4fc29db03bc21bbf0d3814ec2ff66
MD5 b1e554968c8757ea800b6d6c622c6a07
SHA1 68e0387afd3a905f893549560220e76f4e3eebbd
SHA512 06cd6b6e03d5036346b250b8d48cd9de57cffbea79cc86441fddc4c2114c824debf2cbe5b1cdf9e13490295f0fac67aff0e237a11e4653ab7d0065e6689ebccf
SSDEEP 98304:05FAap4H2/R7HwVD/UeFeYsHi4C5Tso6vF+ehViCE9TlRetaa6nPvda+2FTdWQsJ:Qs87W/UeJS0T6wehcVRkga4PUdWQskN6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/theHunter Call of the Wild v1.0-v1.21 Plus +13 Trainer.exe

File Explorer

b1e554968c8757ea800b6d6c622c6a07_JaffaCakes118

.zip 6.0MB
theHunter Call of the Wild v1.0-v1.21 Plus +13 Trainer.exe

.exe 6.1MB

b1e554968c8757ea800b6d6c622c6a07_JaffaCakes118

SHA256 9026f8300c35cbc1294e290cedfd94dab0d4fc29db03bc21bbf0d3814ec2ff66
MD5 b1e554968c8757ea800b6d6c622c6a07
SHA1 68e0387afd3a905f893549560220e76f4e3eebbd
SHA512 06cd6b6e03d5036346b250b8d48cd9de57cffbea79cc86441fddc4c2114c824debf2cbe5b1cdf9e13490295f0fac67aff0e237a11e4653ab7d0065e6689ebccf
SSDEEP 98304:05FAap4H2/R7HwVD/UeFeYsHi4C5Tso6vF+ehViCE9TlRetaa6nPvda+2FTdWQsJ:Qs87W/UeJS0T6wehcVRkga4PUdWQskN6
MD5 SHA1 SHA512 SSDEEP

theHunter Call of the Wild v1.0-v1.21 Plus +13 Trainer.exe

IMPHASH affa2f94d00b1c91617b7450de103626
SHA256 3911090c49c42ddc26c497467f1509e5bf09f33a2b8ecf922e87c1dcb30567a1
MD5 910e90ff062405be912274a4d7220319
SHA1 17b2b28b0dcefa014bc91da00909740e73b8e6c6
SHA512 91e9402b5f21dc3a726afb73c40da0c21b53da3b195591a74242c232626dd3d905e9f51e6f7bab3f06fea30464cf1e7cbc264ea77e0923e59f4c5c0291fabe6e
SSDEEP 98304:R/50MFWd2lJt9IJtDgMZIMCXkMuPnu0evHect/UOgb9zz6fYOCTh9beKupnjaO4l:jmAtQDgMdIKnQGctcP9mgOqhYjaO4kRs
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

11444

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

360B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xcpad

Size

Virtual Size

4.9MB

Characteristics

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

b1e554968c8757ea800b6d6c622c6a07_JaffaCakes118

theHunter Call of the Wild v1.0-v1.21 Plus +13 Trainer.exe

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

b1e554968c8757ea800b6d6c622c6a07_JaffaCakes118

theHunter Call of the Wild v1.0-v1.21 Plus +13 Trainer.exe

kernel32

generic