0c6ead9280c1897a2edaba598d595c1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c6ead9280c1897a2edaba598d595c1c_JaffaCakes118
Size

147KB
MD5

0c6ead9280c1897a2edaba598d595c1c
SHA1

ed125b761b830056aa6b7130862c66a8e8ed38a2
SHA256

b8a24c55a2c58989bbe712560d98ac27b3f8b05a6ae0c7c914d927d0bc289fbd
SHA512

cf466426c97755a2bb547bc914b1eba0aa6a037fc9191d99ce7d6b5901f492897cd2fd640319e9e2792ef3a7ce71b44be95f0c9d6da279d82891aa0447018c77
SSDEEP

3072:PghVGWIqiNfxFcIrVAg4r70ma+4cTcOGqOJixvZ8jrh/eEAAS0UsafO+Qzmy:o3L1itf9ug4r70mj7TqqOMlZSmEq0Usl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Outlaws.exe

Files

0c6ead9280c1897a2edaba598d595c1c_JaffaCakes118
.zip
CheatsCorner-Readme.txt
Outlaws.exe
.exe windows:4 windows x86 arch:x86

b00254d4265569bdff6127c6bfb4f331

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ExitProcess
GetWindowsDirectoryA
lstrcatA
CreateDirectoryA
DeleteFileA
RemoveDirectoryA
FindResourceA
LoadResource
LockResource
SizeofResource
CreateFileA
WriteFile
CloseHandle
OpenProcess
VirtualAllocEx
WriteProcessMemory
LoadLibraryA
GetProcAddress
CreateRemoteThread
WaitForSingleObject
CreateThread
SetThreadPriority
HeapAlloc
HeapCreate
HeapDestroy
Sleep
ReadFile
SetFilePointer

user32

DialogBoxParamA
SetTimer
LoadBitmapA
SendDlgItemMessageA
FindWindowA
EndDialog
GetWindowThreadProcessId

winmm

waveOutClose
waveOutGetPosition
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite

Sections

code
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

data
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 515KB - Virtual size: 515KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
cheatscorner.de.url
outlaws.nfo