94abb36ae4cb44c9778e1f99d87c90d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94abb36ae4cb44c9778e1f99d87c90d0_JaffaCakes118
Size

3KB
MD5

94abb36ae4cb44c9778e1f99d87c90d0
SHA1

e576445612dc7c155f66afac6c6010ad99be8e33
SHA256

12e6e2a9d3d346ec194388e3daf5b8797768c6b1fdd14767a845034538177318
SHA512

5a5594bd2f186fbe76ee12eb7ca34e8667a640d322a98507b1491a27756ca33a78173c93ef7a6176c771c45dc873e44d3d26e4e49719a64cb8f1e70eaa74e916

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94abb36ae4cb44c9778e1f99d87c90d0_JaffaCakes118

Files

94abb36ae4cb44c9778e1f99d87c90d0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ