0e08341e69b18da0a4bd547d1e453a99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e08341e69b18da0a4bd547d1e453a99_JaffaCakes118
Size

3KB
MD5

0e08341e69b18da0a4bd547d1e453a99
SHA1

3f1b99ba2c4d0b896569f1329b0f308105759539
SHA256

b008adb69d9d21a383e84d9fb1c4682a06dfdb3de5f5233d407ab134587dbd3f
SHA512

d01aa46ecfec7a732aedc98fbf8a558c3613a18aa5af7569b707b4ee09b6c2e39722da23b56f9779759eb622ae3faec82bd90e09ec1eed9b17c95c8c356d09d1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e08341e69b18da0a4bd547d1e453a99_JaffaCakes118

Files

0e08341e69b18da0a4bd547d1e453a99_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ