2c473d252110162febc7af442ed72895_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c473d252110162febc7af442ed72895_JaffaCakes118
Size

3KB
MD5

2c473d252110162febc7af442ed72895
SHA1

a4783d796f9f7a1ed893b0783b76048fc283485c
SHA256

50f8fb27b9b93e3b36abe1cfb8329deff75e8199b727eeac14d5250de0a020dd
SHA512

63fe8775ea45c0bc346f020e3d7e7ebc27e9d33db8dde377dfedb5f0b759d8fc472f2686c56596efb927c15992bdd596601e73ccd9b04de4c2078f852b2cd9d3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c473d252110162febc7af442ed72895_JaffaCakes118

Files

2c473d252110162febc7af442ed72895_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ