ed70153d02142a6cc977c457018e558d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed70153d02142a6cc977c457018e558d_JaffaCakes118
Size

3KB
MD5

ed70153d02142a6cc977c457018e558d
SHA1

dfc9b6789958004f1dbf62ae61b5ccd4bb255f7e
SHA256

d6765ef9e73ce9aac3845ebf95b1f72c3182bf384c83992a35c6a6fa99beb579
SHA512

6016980af79b00f5be2ffdbb4f94d9100e4ff2103c9adf11b3975d3c6d019df104e9c433be898603a69b444e6fbf5e7fb34df25a3d7a7701d9876cc75aefeea7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed70153d02142a6cc977c457018e558d_JaffaCakes118

Files

ed70153d02142a6cc977c457018e558d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

da67b03be4d956115176644a6815d0f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
CreateFileA
SetFilePointer
FreeLibrary
HeapAlloc
HeapFree
GetProcessHeap
ReadFile
GetShortPathNameA
FindFirstFileA
GetLastError
GetProcAddress
LoadLibraryA
GetModuleFileNameA
CreateMutexA
CloseHandle
GetFileInformationByHandle
CreateThread

Exports

Exports

exit

Sections

.text
Size: 1024B - Virtual size: 565B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 641B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ