114e2016aa5092e545f91e88c87d6ae4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

114e2016aa5092e545f91e88c87d6ae4_JaffaCakes118
Size

3KB
MD5

114e2016aa5092e545f91e88c87d6ae4
SHA1

8dc621d992f6eea9a1a72657e2d39ffb40f8af65
SHA256

c640a63846cee6e810a1343be320bf8ab9ecf5febef3a01dcb9c543ab3608347
SHA512

0f70b249cb44226a907751c359f04df2402d434746dc5095ea82be249d46d677cedbaa18ef24c5a084310a067b1f30b390e68adac8ee2647619b2bfaf9da3e05

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
114e2016aa5092e545f91e88c87d6ae4_JaffaCakes118

Files

114e2016aa5092e545f91e88c87d6ae4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ