072627337e0463e50dcb8c196a72a9f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

072627337e0463e50dcb8c196a72a9f8_JaffaCakes118
Size

3KB
MD5

072627337e0463e50dcb8c196a72a9f8
SHA1

7628665aa2ca25e7d1ae891c29120111709d05e8
SHA256

5eadd2a4f8b31314f1759f60ef5f5bcb4ab850c035f255319b45f4d11e068cd2
SHA512

037978da8ca41f76773273c9aec7694775c28727ef37c42281891d87b0bcb62c5385e128721cdbd246d673da5482fc00b849f53089629d591b535da8547ca345

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
072627337e0463e50dcb8c196a72a9f8_JaffaCakes118

Files

072627337e0463e50dcb8c196a72a9f8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ