d7ad80f2f8d5b28983310cefffcf8878_JaffaCakes118 | Triage

Sharing

General

Target

d7ad80f2f8d5b28983310cefffcf8878_JaffaCakes118
Size

5.0MB
MD5

d7ad80f2f8d5b28983310cefffcf8878
SHA1

5e51b23489c64b155b653669fd8c7fa882bfe50a
SHA256

1351f27d0b7e0d1f4700162d4f91dc93bb43a2aefa0ba22f86056bc6444a9703
SHA512

1af14e752d5e8e492d3f0d576f78674b81b5f15a55474299e6200826a66446c17c0c44a40fc27c60d906d03fabf368287e3707e71b2d46c7e409109307f0cf87
SSDEEP

98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P59:TDqPe1Cxcxk3ZAEUad

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d7ad80f2f8d5b28983310cefffcf8878_JaffaCakes118

Files

d7ad80f2f8d5b28983310cefffcf8878_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2e5708ae5fed0403e8117c645fb23e5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateProcessA

msvcrt

free
_initterm
malloc
_adjust_fdiv
sprintf

Exports

Exports

PlayGame

Sections

.text
Size: 4KB - Virtual size: 652B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ