6f47ae197a49139c0a7222f6428c2001_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f47ae197a49139c0a7222f6428c2001_JaffaCakes118
Size

4KB
MD5

6f47ae197a49139c0a7222f6428c2001
SHA1

d9851c99d56abb6b43a8b85b7df4ca32fe070210
SHA256

4fd3ca2017a9adc91b9c8d0d69208c38488a544d4491066a079c743fcd5cf07e
SHA512

3b012f3b4bcabde75c05e711e52b44e3c92349cff918033d2b988b16a4c16cb2da95b6ceb75c2aa77cc6ab365465a001d8abbfc97094ba49344a1e4ea3103283

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f47ae197a49139c0a7222f6428c2001_JaffaCakes118

Files

6f47ae197a49139c0a7222f6428c2001_JaffaCakes118
.dll windows:4 windows x86 arch:x86

fa81dc4d4d22d399598fde00b1f3ca81

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateThread
ExitThread
GetLastError
GetProcAddress
LoadLibraryA
ReleaseMutex
Sleep

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ