486f3b0c2d9fc55d6069c0f76c7d741e_JaffaCakes118 | Triage

Resubmissions

15-07-2024 05:50

240715-gj2jfstfng 10

15-07-2024 05:49

240715-gjjnms1clk 10

15-07-2024 05:46

240715-ggp3mstenf 10

15-07-2024 05:45

240715-gfpeqatekc 10

15-07-2024 05:34

240715-f9qzzatblb 10

Sharing

General

Target

486f3b0c2d9fc55d6069c0f76c7d741e_JaffaCakes118
Size

5.0MB
MD5

486f3b0c2d9fc55d6069c0f76c7d741e
SHA1

dc32bd56935cb12c458cd2cb0aa0456c43c4e521
SHA256

74609a495eeaae9953d8c5cb66bd8ac3c8b955e005506252eabf4d3e4dbc422f
SHA512

2829527cf90924fec17e9145b665a6fb9c7f24699c45fbc122f49ec6f59cc8abb7f09deddfcee461a70ee5464ccee9c334acea953f2dacb006f77d92755c71b7
SSDEEP

98304:6DqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp21:6DqPe1Cxcxk3ZAEUadzR8yc41

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
486f3b0c2d9fc55d6069c0f76c7d741e_JaffaCakes118

Files

486f3b0c2d9fc55d6069c0f76c7d741e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2e5708ae5fed0403e8117c645fb23e5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateProcessA

msvcrt

free
_initterm
malloc
_adjust_fdiv
sprintf

Exports

Exports

PlayGame

Sections

.text
Size: 4KB - Virtual size: 652B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ