968ef046ff1e7d28997fb42342ed3d57_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

968ef046ff1e7d28997fb42342ed3d57_JaffaCakes118
Size

3KB
MD5

968ef046ff1e7d28997fb42342ed3d57
SHA1

04ce301b572a37b9186174a52bdd53382db6304b
SHA256

43ac7f251c8a2b4ee3305ce66a9c1d6b52c198e9eebb388dfdec964a67dbf119
SHA512

740bba2ccc9d5ca3c79299feb6a11cdac467d370e3e9bbd46b00eec6945f3bfc5cd3c48aa041586f814fa59757e9c2354c86e397bb339f484e212783b28229e5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
968ef046ff1e7d28997fb42342ed3d57_JaffaCakes118

Files

968ef046ff1e7d28997fb42342ed3d57_JaffaCakes118
.exe windows:4 windows x86 arch:x86

603fbbc39079062bb584696715f61afb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
FreeLibrary
Sleep
GetCurrentProcessId
GetModuleHandleA
GetProcAddress
lstrlenA
LoadLibraryA
CloseHandle
GetLastError
CreateMutexA

Sections

.text
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 322B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE