cf034b7aaefb6486e4c648aa449e8e91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf034b7aaefb6486e4c648aa449e8e91_JaffaCakes118
Size

22KB
MD5

cf034b7aaefb6486e4c648aa449e8e91
SHA1

5cd747e6218af2311a872e0fe9e338303526aee6
SHA256

4f0938fc9202d478f52ee26b3854d22950f25ae3eef323423694d75903ef0321
SHA512

fad2ed373ccf01c146dc1d012620fd7d380db20fcdaf2b85a5362e593d50098769ea5f3ef6ac00265df574af952293582f8f64535365872aacaeffb63af0cc17
SSDEEP

384:Wso7d3YQjyi0C8pZ4H1DuFtIb/G7qr5QArqXScNgLr6PsCyM+qmXUZgCpcFWFO:07dZyiak1DuDXerqlit6nbmbU74

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/trainer.exe

Files

cf034b7aaefb6486e4c648aa449e8e91_JaffaCakes118
.zip
stopgame.txt
trainer.exe
.exe windows:4 windows x86 arch:x86

a3dc189d70fbe60fd96f48ceea8cdbe9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetAsyncKeyState
SendMessageA
MessageBoxA
GetDlgItem
SetFocus
DialogBoxParamA
SetTimer

kernel32

WriteProcessMemory
GetModuleHandleA
CreateProcessA
ExitProcess

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE