bb78b1f1b624200aa95ed7b9de744b12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb78b1f1b624200aa95ed7b9de744b12_JaffaCakes118
Size

1.2MB
MD5

bb78b1f1b624200aa95ed7b9de744b12
SHA1

36fdc394fc13ccdd8f1173a14b84923f8bf6e3b7
SHA256

0f66701d407fe3b343d65bf6af4378965e8f17d8d039bc4aaa97f58ffae4df8c
SHA512

b0ec7c091b4fb8c720f4e0950f9cc25f48e448b6f06e0db0d15e068aad3dc433f0ef0ada347f36ee28cb2cf529f2a00653f652ac38544ebd7773f746b91b3591
SSDEEP

24576:BpLKYHiZSS+1mX3g7oTt2nQDkZlZIvtnr+PZUseIuwx0wz7A2:7L1iZasiWt2DWvtr+PNGkfA2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Borderlands v1.41 + 15 Trainer.exe

Files

bb78b1f1b624200aa95ed7b9de744b12_JaffaCakes118
.rar
ALI213.txt
Borderlands v1.41 + 15 Trainer.exe
.exe windows:4 windows x86 arch:x86

668a44ff2871016aaf7fa16d60cbff30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

OleUninitialize

comctl32

ImageList_SetIconSize

shell32

Shell_NotifyIconA

comdlg32

GetSaveFileNameA

winmm

timeSetEvent

imagehlp

SymSetSearchPath

Sections

CODE
Size: 1.2MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
h4x0r.nfo
游侠网专题导航-游侠网中国单机游戏门户.url
.url