28f1b844c8e6249e800d9ca0466b515e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28f1b844c8e6249e800d9ca0466b515e_JaffaCakes118
Size

875KB
MD5

28f1b844c8e6249e800d9ca0466b515e
SHA1

d1de1507a70e7ab4317a57926539c8857a828d94
SHA256

1db797cfee359f80f967a10583a1cc7a56d1cd7fec9e2dff38108a47f6c72a12
SHA512

71bfe6de5a04294d0124b3c0a58266c0cb7a289fd2322b4ff770684aa4b5ff010ebff9d98be4bd8aafbb604914c412350704a4389e8c588be3827a6d36b892fe
SSDEEP

24576:hHHPfnAA/vYFhWFwT9zRVLTCgZS/PzJBOEnYrJv08k5Y:hHvD/gFvlLTCgZS1B4vXP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Tropico v1.09 + 1 Trainer.exe

Files

28f1b844c8e6249e800d9ca0466b515e_JaffaCakes118
.rar
Download more trainers and updates.URL
Tropico v1.09 + 1 Trainer.exe
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

CODE
Size: 855KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
file verification.txt
h4x0r.nfo