8efa68b50f3be364752346c8c53b5a17_JaffaCakes118 | Triage

Sharing

General

Target

8efa68b50f3be364752346c8c53b5a17_JaffaCakes118
Size

3KB
MD5

8efa68b50f3be364752346c8c53b5a17
SHA1

3e8fbe4be8490468f921ef442967fb69ef437886
SHA256

96b463772b246b70675e490bf14fbdeab1a4950a104d38e0e93f81af2b367e13
SHA512

403121c5be3a34630ddf2fe5cd7f584141e0a8ead719a1dd6c1925018cd9321a568885c9de558d11e32fee4f5f5fb09a0d5015ca776cf0ddd298d0b2a91ce395

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8efa68b50f3be364752346c8c53b5a17_JaffaCakes118

Files

8efa68b50f3be364752346c8c53b5a17_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ