6108833e58a96900db070f2eff18dc99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6108833e58a96900db070f2eff18dc99_JaffaCakes118
Size

2KB
MD5

6108833e58a96900db070f2eff18dc99
SHA1

0aec2179e5a42997fa845a6804e903d75b1923fc
SHA256

24d44b626ca97e1bfe9b4a682b54d68fa37bffaecd33efb5a9d91335493c88cb
SHA512

578805f2844b33a61622b34cce3d662934de0d9a3923aad983ebab877340789a3fd46cf0365fa829c99c7aa9f5c8ee5667a1fef82bda78f783aa1c0ed22248fd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6108833e58a96900db070f2eff18dc99_JaffaCakes118

Files

6108833e58a96900db070f2eff18dc99_JaffaCakes118
.dll windows:4 windows x86 arch:x86

93d5875353531230f77859392f5d10fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateMutexA
CreateThread
Sleep
WinExec
GetModuleFileNameA
GetModuleHandleA
GetCurrentProcessId
GetVersionExA
GetSystemDirectoryA

advapi32

GetUserNameA

Exports

Exports

win1

Sections

.text
Size: 1024B - Virtual size: 975B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ