8564d1fea7e67e7ab204a668b2f768a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8564d1fea7e67e7ab204a668b2f768a5_JaffaCakes118
Size

3KB
MD5

8564d1fea7e67e7ab204a668b2f768a5
SHA1

146ecdecd5b5e64785f8ce2790677417b2a34b0f
SHA256

9804ff124b1ee9c574a2c6aa17f32b7d33b41bb84b9cfc75fe844630a793abe2
SHA512

3a4d4060be7d57113ece280259ffd1057f528726ad8a923781aa60103780cbc7a429cb1ce380532e02f37a2b04ea9c056498fb781f44056b733c984cbe728a08

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8564d1fea7e67e7ab204a668b2f768a5_JaffaCakes118

Files

8564d1fea7e67e7ab204a668b2f768a5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ