be320f3e37973cf46267e9bafa9a77ec_JaffaCakes118 | Triage

Sharing

General

Target

be320f3e37973cf46267e9bafa9a77ec_JaffaCakes118
Size

3KB
MD5

be320f3e37973cf46267e9bafa9a77ec
SHA1

10b398809cd1d5c55fdb341d11b412e1a2443f07
SHA256

238818488794f6cb49293c7f54e9e7d6c402677949e69fbe72c1320f283b97ea
SHA512

b200f1ec23e5e8a328539a59211b09f4e6b748254774c1a947f8ce6250fcb79f8f558cdd57d69c119f79e8534dae8bdd0c59d4f71637eedfbabbfacacec0562f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be320f3e37973cf46267e9bafa9a77ec_JaffaCakes118

Files

be320f3e37973cf46267e9bafa9a77ec_JaffaCakes118
.dll windows:4 windows x86 arch:x86

17fb0a33af4b42eed8d0236e198eaff8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegQueryValueExA
RegOpenKeyExA

kernel32

VirtualAlloc

Exports

Exports

CreateProcessNotify

Sections

.text
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ