f196356784889b0e10fc17d063681f7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f196356784889b0e10fc17d063681f7c_JaffaCakes118
Size

3KB
MD5

f196356784889b0e10fc17d063681f7c
SHA1

77c1c706ef83398b12677bfc4f52320327b663c2
SHA256

21ef0f68b15a3bbe62c9f36b9071a8c533755fe12030449399a7351885115f16
SHA512

74268d708d2106b7df91254fe918c813b36defa197804e490b317f123207493dfcfef704bf826d5ee1b8b1460f119c855a52fbe6b45b2a9a667b009873d43514

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f196356784889b0e10fc17d063681f7c_JaffaCakes118

Files

f196356784889b0e10fc17d063681f7c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ