226dd878841a8cb982a2bc4bc3a6c532_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

226dd878841a8cb982a2bc4bc3a6c532_JaffaCakes118
Size

3KB
MD5

226dd878841a8cb982a2bc4bc3a6c532
SHA1

3d0cdc0ab26b9684c97a0457e40833192343d0a8
SHA256

d59fa34dfa6ee09f4e1875a19b76f20649370e1977c83ddc02086a526323f08e
SHA512

c3ec7168bb9e2fe9b776a06277c0ef5c31042999ac2814f38d88ce3a3b4225b0f9e643280153258ab780ab28d810b1135fde5c391fd8a7f62a06ab1a3478ee73

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
226dd878841a8cb982a2bc4bc3a6c532_JaffaCakes118

Files

226dd878841a8cb982a2bc4bc3a6c532_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ