f2e2d36f1ca62d2ca0e2d2048ff9bd8f_JaffaCakes118 | Triage

Sharing

General

Target

f2e2d36f1ca62d2ca0e2d2048ff9bd8f_JaffaCakes118
Size

5.0MB
MD5

f2e2d36f1ca62d2ca0e2d2048ff9bd8f
SHA1

2e6b1cc6d6be41f90b5c775148ebc234a54f5d3b
SHA256

0d4245b5b2282c6f37e0b24f9c12c2f7034a4aa35334c87c1aa8dfe271e35d14
SHA512

4bdb9c83d251b252ef06c30b28b4f8101aacb2aed8b7c36acd68b96472eb415c1d15f487cc5231f0124ee3a8a3f21ac9dac08b6c1183b1d8afa3f89b329af694
SSDEEP

24576:SbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNL7DauvgI8+75ST:SnAQqMSPbcBVQej/1INPuLN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2e2d36f1ca62d2ca0e2d2048ff9bd8f_JaffaCakes118

Files

f2e2d36f1ca62d2ca0e2d2048ff9bd8f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2e5708ae5fed0403e8117c645fb23e5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateProcessA

msvcrt

free
_initterm
malloc
_adjust_fdiv
sprintf

Exports

Exports

PlayGame

Sections

.text
Size: 4KB - Virtual size: 652B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ