9727ba6cc6d4ea0a5eea402579af9fdc_JaffaCakes118 | Triage

Sharing

General

Target

9727ba6cc6d4ea0a5eea402579af9fdc_JaffaCakes118
Size

3KB
MD5

9727ba6cc6d4ea0a5eea402579af9fdc
SHA1

b7d00f43a76ae670232d0d58db2bbc03163431d6
SHA256

087094988487355aa980908f55ac64745e0a57925d86587cde9f29f765acb851
SHA512

b4a307319851aeb5d9c0d46f13a2c822d8c6ac26e2183abcefb554f96a029f201bca87010ff72f5d03ccab7f34048d463bc7a33f0360de66984a89434eed851e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9727ba6cc6d4ea0a5eea402579af9fdc_JaffaCakes118

Files

9727ba6cc6d4ea0a5eea402579af9fdc_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ