d454f558f644289b2a4add1c44986abf_JaffaCakes118 | Triage

Sharing

General

Target

d454f558f644289b2a4add1c44986abf_JaffaCakes118
Size

5.0MB
MD5

d454f558f644289b2a4add1c44986abf
SHA1

7ab6673c1c18a0fa12aa1f15a71e069b19c06c20
SHA256

ce0beae359bd37e504a089a30a4489e39e63985b91e8700cf77ce6b89401500b
SHA512

1819dc72bb74720d75d85507a86019be8f1048a4eea2089ed7a1f99a6afffa99d5f4664ef8983c660aab2e426742f4aaf0651283e1977629c16461e4cfa08cf8
SSDEEP

49152:RnpdMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:1pdPoBhz1aRxcSUDk36SAEdhv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d454f558f644289b2a4add1c44986abf_JaffaCakes118

Files

d454f558f644289b2a4add1c44986abf_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2e5708ae5fed0403e8117c645fb23e5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateProcessA

msvcrt

free
_initterm
malloc
_adjust_fdiv
sprintf

Exports

Exports

PlayGame

Sections

.text
Size: 4KB - Virtual size: 652B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ