c69c3426b0a18a32fd1b92141de9f31d_JaffaCakes118 | Triage

Sharing

General

Target

c69c3426b0a18a32fd1b92141de9f31d_JaffaCakes118
Size

5.0MB
MD5

c69c3426b0a18a32fd1b92141de9f31d
SHA1

51d7b7136d3ec9245c1214c5d360abd862ce1014
SHA256

d0a45c51cc535e01462574893b4ba72c8273fe42fd6bfcbb8fb5e38876ba2962
SHA512

43596018faca6445ef8780ff25a2856204a62f78d09fa0be0c05f2cc5f064a914ccd7ae0cdbcc407d4f8ebd98c3aaf9e7072a497d3c140772619350e37147751
SSDEEP

12288:yvbLgPlu+QhMbaIMu7L5NVErCA4z2g6rTcbckPU82900Ve7zw+K+DhEh:SbLgddQhfdmMSirYbcMNgef0kE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c69c3426b0a18a32fd1b92141de9f31d_JaffaCakes118

Files

c69c3426b0a18a32fd1b92141de9f31d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2e5708ae5fed0403e8117c645fb23e5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateProcessA

msvcrt

free
_initterm
malloc
_adjust_fdiv
sprintf

Exports

Exports

PlayGame

Sections

.text
Size: 4KB - Virtual size: 652B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ