345adb4594e3a2b02041c7e2b5fde46b_JaffaCakes118 | Triage

Sharing

General

Target

345adb4594e3a2b02041c7e2b5fde46b_JaffaCakes118
Size

4KB
MD5

345adb4594e3a2b02041c7e2b5fde46b
SHA1

c2b5aff3435a7241637f288fedef722541c4dad8
SHA256

bf012045464ba2aadc1547940eb3ce262d0e023c2198c134dee658c859ecd8ab
SHA512

13528893b4505cebc2326df718fc89f4164e094f3192f5b2516f3efb30d2ef5206a0d6780978a2346e83c7a6656bea2bf483e75c0fdc27249f264277c57d5932

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
345adb4594e3a2b02041c7e2b5fde46b_JaffaCakes118

Files

345adb4594e3a2b02041c7e2b5fde46b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1713500c58d5d1aa54e85bf38887306e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
lstrcpyW
GetLastError
ReleaseMutex
HeapAlloc
GetProcessHeap
CreateProcessW
CreateMutexW
SetLastError
DisableThreadLibraryCalls

advapi32

RegOpenKeyW
RegQueryValueExW
RegCloseKey

Sections

.text
Size: 1024B - Virtual size: 618B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 674B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ