737d46c91629b63289005d23042104a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

737d46c91629b63289005d23042104a9_JaffaCakes118
Size

3KB
MD5

737d46c91629b63289005d23042104a9
SHA1

5035dd3c57b093ca3a76ff139af02e8db0a90c8b
SHA256

5c4ba2cb8ac93b37a1b53d55a897736a1a56c60d06f869b27e9cfbe152c2e737
SHA512

044392bb3a38e0d360685efc93dd3e0aaae3b7432b68b340ce2a4c76a7670aa0e1d4d0b6f53ca316c791f5cbb320a8f08930df172b279ef25a7547e993164d28

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
737d46c91629b63289005d23042104a9_JaffaCakes118

Files

737d46c91629b63289005d23042104a9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ