38bcae1d274389a9da23a04a1a2b049d_JaffaCakes118 | Triage

Sharing

General

Target

38bcae1d274389a9da23a04a1a2b049d_JaffaCakes118
Size

3KB
MD5

38bcae1d274389a9da23a04a1a2b049d
SHA1

b22a8b1be8697e40da13dc8647369af8c0f6a76a
SHA256

896e1f058253e71095ecad5d342022688dc897690bf539acbb19922e1fb6b5fc
SHA512

def33ab80c6b0a68f27ac85be6ceb0d54264b73512bdd4b8c44be46fd8bb40f4c5ca68a41b0e4ea6d239303673fb88fea80fd0dba1ad1ce135120c319c3bd169

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38bcae1d274389a9da23a04a1a2b049d_JaffaCakes118

Files

38bcae1d274389a9da23a04a1a2b049d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ