b69330e69d3b02355de73a1e225f2b5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b69330e69d3b02355de73a1e225f2b5f_JaffaCakes118
Size

3KB
MD5

b69330e69d3b02355de73a1e225f2b5f
SHA1

daf5b6c35ac97c4ca9ab8c5ca7d6465d9fd35246
SHA256

495281d6df6d42baaef5868575a16c2574a55ddb3756dfaacb9435d92dd49bd2
SHA512

b9824c30ab51839de4f17773fe3b91d2f59b2504bb7618f85ee241a0b3798cafe72baef5f1151b2acc6e0e118dfd47d215e0c6b5ea2e16f07f0984954345b6a9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b69330e69d3b02355de73a1e225f2b5f_JaffaCakes118

Files

b69330e69d3b02355de73a1e225f2b5f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ