2450b2830ffb39fbc366d3e487b171bd_JaffaCakes118 | Triage

Sharing

General

Target

2450b2830ffb39fbc366d3e487b171bd_JaffaCakes118
Size

3KB
MD5

2450b2830ffb39fbc366d3e487b171bd
SHA1

49d6c4b67b7a2c1f6e37590ddf4cc18beb557176
SHA256

0e79504b1560744fe4009912afaaf2c7c3f3267bed891d2421e53750551c64bf
SHA512

fca488aef635ca73c3c4ec62e563d2735a04fd0ccc038e1db2076be114c65a3f77e40b6f1c3f5c1a2024d1c89a6951f09e0d3e0635e41b83dd425ed2db362597

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2450b2830ffb39fbc366d3e487b171bd_JaffaCakes118

Files

2450b2830ffb39fbc366d3e487b171bd_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ