0184b50c8a5e476631d1eb51683f23e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0184b50c8a5e476631d1eb51683f23e0_JaffaCakes118
Size

3KB
MD5

0184b50c8a5e476631d1eb51683f23e0
SHA1

a825a9fdc4c8d95906c65c9e42742a51a6512dc2
SHA256

ef779bd9b1d8025edfcde0d1405173cfe44daa0e347941a09a9c5bce35b15f0d
SHA512

b07de86c4e9bf5666b64f1516bd8801f7dcdf8e39b0d6869f6ba82b334638a42348f7b51a9b314f3c32c78466da4f1e9fd6a4ec4e22ea55ba03a1ae90ac0a881

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0184b50c8a5e476631d1eb51683f23e0_JaffaCakes118

Files

0184b50c8a5e476631d1eb51683f23e0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ