Static task
static1
Behavioral task
behavioral1
Sample
Download more trainers and updates.url
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Download more trainers and updates.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Far Cry 2 v1.03b Fortune's Edition + 13 Trainer.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Far Cry 2 v1.03b Fortune's Edition + 13 Trainer.exe
Resource
win10v2004-20240802-en
General
-
Target
f5a34d90c12f8b6d69c41cc51549ef02_JaffaCakes118
-
Size
804KB
-
MD5
f5a34d90c12f8b6d69c41cc51549ef02
-
SHA1
b90d1022c86468b28e0e457759aa57b350ad4fb7
-
SHA256
878387308a76ed907fe088755f1053ae8345aad5df2eaf9dae34a003b604de89
-
SHA512
2daa86424f6637c838f16dd2392303881dea6cab7ab1df9a28cdc88aad336c7e6e5f861629bad61870c45b44e9b0e44b1e007bacc6e0af0930cfce33e60231d3
-
SSDEEP
12288:Nk1xTtciRIfyZz41B2K8/u29JGYFPhueFWCaCDDlK3cB6tIZjaO17N13ZBWuzO:Ex5HI6FCB2K8P9JrTFWtsfqI1/513eiO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Far Cry 2 v1.03b Fortune's Edition + 13 Trainer.exe
Files
-
f5a34d90c12f8b6d69c41cc51549ef02_JaffaCakes118.rar
-
Download more trainers and updates.URL
-
Far Cry 2 v1.03b Fortune's Edition + 13 Trainer.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 779KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
file verification.txt
-
h4x0r.nfo