61e3b692f3539824d4824e1f4c777706_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61e3b692f3539824d4824e1f4c777706_JaffaCakes118
Size

3KB
MD5

61e3b692f3539824d4824e1f4c777706
SHA1

c930b2a498062269ba54c439bffffc012bd3f009
SHA256

ee7c148822f6a059e50fa81c6bdeace3da6ca9543047243d1d9a6d338701b161
SHA512

fd2d48690afb4e0b119abfb388f3f1f2bc9d7441c534a2f9ef843be86a0b40d9cc8336b7d2b1404e089272ac3b961d5efd774f5fd30515a936ad4bed2d3fb32b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61e3b692f3539824d4824e1f4c777706_JaffaCakes118

Files

61e3b692f3539824d4824e1f4c777706_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ