264c55534866684826d3a0803b716365_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

264c55534866684826d3a0803b716365_JaffaCakes118
Size

3KB
MD5

264c55534866684826d3a0803b716365
SHA1

9aa20b7633148e8fe586199ee8000372801aa675
SHA256

903724909c3c1739c763bf9b149277a8dc9820a7c6a387c20dcb09d3cd0d6a5f
SHA512

bed9eaedf010cefc62bc82097feefb67311717a35f7fdc22418f7b86d9a3d95b073993cf3cbe7540eafeee60a1753c103151ce1cb32111f7b4bb56d9a9613584

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
264c55534866684826d3a0803b716365_JaffaCakes118

Files

264c55534866684826d3a0803b716365_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ