d384a3238d2bc7f00a8e032e2be759af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d384a3238d2bc7f00a8e032e2be759af_JaffaCakes118
Size

3KB
MD5

d384a3238d2bc7f00a8e032e2be759af
SHA1

82147749a44a4c45fc59cf5dd36839600982e2ce
SHA256

bd947bbec214edfc4fc398fd1890c13ed010aa5408c1347ace443d9218b1268c
SHA512

da1787f205daad05a9e03c647fe420b0518fb40ac82e7a1f7c6e54510d92c95c4284f3ec6bb2b260dba60011451eeb37f2b0e64e9e4d21dd3b5e9af12da81c98

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d384a3238d2bc7f00a8e032e2be759af_JaffaCakes118

Files

d384a3238d2bc7f00a8e032e2be759af_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ