306c1ce397c76caf7dd3d1dc1c3a3dc9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

306c1ce397c76caf7dd3d1dc1c3a3dc9_JaffaCakes118
Size

24KB
MD5

306c1ce397c76caf7dd3d1dc1c3a3dc9
SHA1

506c3fa76cab77d8c5a09ceac7770c3992ad8562
SHA256

79ae6ad3abe52c3aeb5d88ad8c4aa799342334a73d17d711417f2252625bbfab
SHA512

e1d8ffb7dc65a2a36c178b80c9b2d4fae13648ee556dbfe0115afde1b7f80fa85afd89739df4f84c721f17a73b1673ab2e3b3e9311aba2af3ad999f5cd77f961
SSDEEP

384:1ZO/0BIAHgVl8/4ozv9xciyBWz7D57a0ddNJ5jnsBEm46J3EgbM7kaNsQ44Bd:1ZlB8cAoRxcbBc5O0dJ5K46yOMg2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/trainer.exe

Files

306c1ce397c76caf7dd3d1dc1c3a3dc9_JaffaCakes118
.rar
deviance.nfo
trainer.exe
.exe windows:4 windows x86 arch:x86

a3dc189d70fbe60fd96f48ceea8cdbe9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetAsyncKeyState
SendMessageA
MessageBoxA
GetDlgItem
SetFocus
DialogBoxParamA
SetTimer

kernel32

WriteProcessMemory
GetModuleHandleA
CreateProcessA
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE