14fca28b608fe30419c4f986a4d4e1b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14fca28b608fe30419c4f986a4d4e1b2_JaffaCakes118
Size

3KB
MD5

14fca28b608fe30419c4f986a4d4e1b2
SHA1

0acf9a7b71091d15911e8cb3888eb412bffb2ad8
SHA256

88434eccd3a4af15c1a712e9a0de52f19031b49a93e629a4f63e820cead7a2fa
SHA512

906a7d881af599b744f5cc95cae3fb3f9a4907e40728ef3a3d6cfcd22d0909f304f579cd25316535e578ea452bbb881ff958aa57de11a1b628c74e9abbe4e5f3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14fca28b608fe30419c4f986a4d4e1b2_JaffaCakes118

Files

14fca28b608fe30419c4f986a4d4e1b2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ