77ee8cb1257cdffd30522a871617c01c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77ee8cb1257cdffd30522a871617c01c_JaffaCakes118
Size

3KB
MD5

77ee8cb1257cdffd30522a871617c01c
SHA1

307a580f9746bc41f428f8bea3d776b31085f7f7
SHA256

1715d043b8cfb8a925e0fef34dd836b1ec762a4ebbae9472e3bca899f592709b
SHA512

e5e47be04033379c85058f38b7f6bd285f7ed237cb03c7784b947b4b535373cd1b5ca8ac5894cf2d14f7fb1068361f09d1f6724ee8dc867247a66e0dc0a252db

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77ee8cb1257cdffd30522a871617c01c_JaffaCakes118

Files

77ee8cb1257cdffd30522a871617c01c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9d42a37087d0c7c05ae5a2e64594e303

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegQueryValueExA

kernel32

LoadLibraryA
VirtualAlloc
GetProcAddress

Exports

Exports

CreateProcessNotify

Sections

.text
Size: 512B - Virtual size: 250B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 55B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ