426f7d09f27b4aa3a92b6d482bf72faf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

426f7d09f27b4aa3a92b6d482bf72faf_JaffaCakes118
Size

3KB
MD5

426f7d09f27b4aa3a92b6d482bf72faf
SHA1

6e97096c28fe12d31f96300b5a5e6e8b0814017e
SHA256

dc1552a1b9d31a9723a3b286343aa2ef5400aec544d2491bbdf539a425cf91b1
SHA512

7044c81d40e20125c04a47b6b587723209b777b2afc5cf301edbff67e5bf8a1a5385ce138c32cc25ec5f6426b4d7d4f3e465bb5f122f3a9ff2b174aa88ffb789

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
426f7d09f27b4aa3a92b6d482bf72faf_JaffaCakes118

Files

426f7d09f27b4aa3a92b6d482bf72faf_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ