175564a8f0671ac7958358d0ff74a0ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

175564a8f0671ac7958358d0ff74a0ef_JaffaCakes118
Size

2KB
MD5

175564a8f0671ac7958358d0ff74a0ef
SHA1

79ccd3b625bcb71374381e743b5ee6fcff9ea41a
SHA256

292ad3d0407700f878ffd10045848bab6216a2a2a75982a72543c6b6b12a5cc2
SHA512

db382dfcd859981da36c80feffd7cf74f3cad6c94c234dac5a2a9b86abcbb73889e451065eceef916afbfd618f302cd8f64e20854c92d216dd0704ac7aecc9cc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
175564a8f0671ac7958358d0ff74a0ef_JaffaCakes118

Files

175564a8f0671ac7958358d0ff74a0ef_JaffaCakes118
.dll windows:4 windows x86 arch:x86

54361d35ac91f7861d151d3559dbc51e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
ReadFile
VirtualAlloc
CloseHandle

Sections

.text
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 30B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ