0ca46febaa345b904143d85393a7148a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ca46febaa345b904143d85393a7148a_JaffaCakes118
Size

1.1MB
MD5

0ca46febaa345b904143d85393a7148a
SHA1

6405f30453f76dc10285792e7a28e36ea06f768d
SHA256

c64584149cf6b931942ed42a164d31ba908c10b0eb103f22c04d6bcc3c71bc96
SHA512

d24152b507b958adb4c3e96173205ac48f5f4690d4b17b44df390f8f63baf454898c86a78314870ae7c800b0cfcb85781e94e29f9fa4b5e283ff0d0b438460b4
SSDEEP

24576:aBvIhQI+VeAwW4AhqLwRf9Xb6qECkihwJO7lttb8PxzNRzN8kd:a0p+YAwW4oq0zr6dcmYZtKtVF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Lost Planet2 Ver 1.000 for Dx11 + 9 Trainer.exe

Files

0ca46febaa345b904143d85393a7148a_JaffaCakes118
.rar
Download more trainers and updates.URL
Lost Planet2 Ver 1.000 for Dx11 + 9 Trainer.exe
.exe windows:4 windows x86 arch:x86

047488bf083a558c7385432b238527c0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

OleUninitialize

comctl32

ImageList_SetIconSize

shell32

Shell_NotifyIconA

comdlg32

GetOpenFileNameA

winmm

timeSetEvent

imagehlp

SymSetSearchPath

Sections

CODE
Size: 1.1MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
file verification.txt
h4x0r.nfo