dfb508f82ab7809d3f0266d852009a99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfb508f82ab7809d3f0266d852009a99_JaffaCakes118
Size

5.0MB
MD5

dfb508f82ab7809d3f0266d852009a99
SHA1

b3987ad6c7e7cc751a63c89a307b335b86e1d78b
SHA256

1ef876ab0e4b0885f1585753423999b8fce935c87b77f9274aa1debff01efe7c
SHA512

a67cc2fa77864a3b35345cd63760865bb0dc2a579e3dbd543a9904a0563f46815115116848e7ade48d6df094ed77787d2de182414937f396e3953e1b44b55dbe
SSDEEP

98304:d8qPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2owc:d8qPe1Cxcxk3ZAEUadzR8yc4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfb508f82ab7809d3f0266d852009a99_JaffaCakes118

Files

dfb508f82ab7809d3f0266d852009a99_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2e5708ae5fed0403e8117c645fb23e5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateProcessA

msvcrt

free
_initterm
malloc
_adjust_fdiv
sprintf

Exports

Exports

PlayGame

Sections

.text
Size: 4KB - Virtual size: 652B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ