c16edec919fc35cb39097f84f1b87455_JaffaCakes118 | Triage

Sharing

General

Target

c16edec919fc35cb39097f84f1b87455_JaffaCakes118
Size

5.0MB
MD5

c16edec919fc35cb39097f84f1b87455
SHA1

a40064964f73182b6a9ee88c2be052907f08c579
SHA256

8fe224636d6cb2404d0b8cf873b2c53d2d82aeff6e15e7d60ed62c68101dc664
SHA512

8455792af038186203c8ae8f423f61c91a591f0bbe275232398b9294fdff849e513c29b8d314a44af6d3d21f996a77e6fa8cf7f80808a21e792d406718938b76
SSDEEP

49152:RnaQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:1lqPoBhz1aRxcSUDk36SAEdhv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c16edec919fc35cb39097f84f1b87455_JaffaCakes118

Files

c16edec919fc35cb39097f84f1b87455_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2e5708ae5fed0403e8117c645fb23e5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateProcessA

msvcrt

free
_initterm
malloc
_adjust_fdiv
sprintf

Exports

Exports

PlayGame

Sections

.text
Size: 4KB - Virtual size: 652B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ