Static task
static1
Behavioral task
behavioral1
Sample
CheatPointblankFuul/PointblankCheat.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
CheatPointblankFuul/PointblankCheat.dll
Resource
win10v2004-20240709-en
General
-
Target
5a823b6776cca3bb815240787d43733f_JaffaCakes118
-
Size
837KB
-
MD5
5a823b6776cca3bb815240787d43733f
-
SHA1
715ba6da07e2d61492367c07e316c513a76e88cf
-
SHA256
19c918a60f9458a672131f1850eb3a9b740c0c78ea8c5a9b0e41087098d037a0
-
SHA512
6cfceba0daec059dc36faad44f7691214013aa2a3b8ab2014265a2913955374ee2b8c4d3f170ab63af71d5c1540fe18027765923254ec60be279fed9c7165d3e
-
SSDEEP
12288:B3hQBDjT10XoQAwjDi5SkkttX0n2r26ky9r/9Sq619R6s6qTmm1J03edNg4ujvvU:uFc0nG26Ht9SH6imp3tjvU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/CheatPointblankFuul/PointblankCheat.dll
Files
-
5a823b6776cca3bb815240787d43733f_JaffaCakes118.rar
-
CheatPointblankFuul/PointblankCheat.dll.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 137KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 75KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 616KB - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE