96e5a4d083390a0ce72052d256a018a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96e5a4d083390a0ce72052d256a018a7_JaffaCakes118
Size

2KB
MD5

96e5a4d083390a0ce72052d256a018a7
SHA1

1a36e720e07202e7be693a954ab5715f111ba39d
SHA256

2288dda3ede509855da20a5eca1ff3d105b6a6b07622200a1cb037eeccacc811
SHA512

fa424bab7a52c4be93d45f85728ce57c9666ef6971deb39fcd06ed2ae8bdd20790c8a983076607e9203ef01833f5328f34e08dc4b55e252f6bb9edcbe3b1e6fd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96e5a4d083390a0ce72052d256a018a7_JaffaCakes118

Files

96e5a4d083390a0ce72052d256a018a7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

8985445be5af79f28aae94821ad6f991

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapFree
LoadLibraryA
WriteFile
GetTempFileNameA
GetTempPathA
CloseHandle
ReadFile
HeapAlloc
GetProcessHeap
GetFileSize
CreateFileA

Exports

Exports

dllStartPlugin
dllStopPlugin

Sections

.text
Size: 1024B - Virtual size: 979B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 62B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ