1ac7c69c4526855b8b4ac9d5e5e14e3e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ac7c69c4526855b8b4ac9d5e5e14e3e_JaffaCakes118
Size

11.6MB
MD5

1ac7c69c4526855b8b4ac9d5e5e14e3e
SHA1

bc981813c80369dddac97e8311e0f657c41a2ca0
SHA256

40b0f65b74406cac32def525de3f98d5792126352ed3e1be201399144ff79f4e
SHA512

59ed7534d0e7645774f89a2be66d2685e13748fdd88e661a42fcff971cc2e9847fb0e02995249866b08ea1360439b3abf4552b7363b9ad84f5ea6afb3931fe75
SSDEEP

12288:MAfA5ysSObDkDfA5ysSObwW59Nb08XNr8jMe:3I7bDkDI7bH59Nb0sNro

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ac7c69c4526855b8b4ac9d5e5e14e3e_JaffaCakes118

Files

1ac7c69c4526855b8b4ac9d5e5e14e3e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

896c6b3357b9fc11e3348edd360c1aaf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyboardLayout

shell32

ShellExecuteA
SHGetSpecialFolderPathA

shlwapi

StrChrIA
StrStrA

kernel32

lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeLibrary
GetCurrentDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
GetVersion
LoadLibraryA
LoadResource
LockResource
RtlZeroMemory

comctl32

GetMUILanguage

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 846B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11.5MB - Virtual size: 11.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE