cfb8e24c51476d67124476d7f9ab734f_JaffaCakes118 | Triage

Sharing

General

Target

cfb8e24c51476d67124476d7f9ab734f_JaffaCakes118
Size

5.0MB
MD5

cfb8e24c51476d67124476d7f9ab734f
SHA1

764d67ff69b5e42e16020f13fd82640ab53ddc7f
SHA256

2a2cf60ecf5fded877ac54be621a6ff5eda5e21c1c831d7db64e3186470e4bff
SHA512

0ba182bf7c3bd92fd00cde395989971104833f026e95276c003bc4180a0d51076fa721d8c85dee9d2a916897387ed120a0854f80bca5e2c0f0b0f2e02f7b510f
SSDEEP

24576:SbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626nq/:SnAQqMSPbcBVQej/1INR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfb8e24c51476d67124476d7f9ab734f_JaffaCakes118

Files

cfb8e24c51476d67124476d7f9ab734f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2e5708ae5fed0403e8117c645fb23e5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateProcessA

msvcrt

free
_initterm
malloc
_adjust_fdiv
sprintf

Exports

Exports

PlayGame

Sections

.text
Size: 4KB - Virtual size: 652B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ