17c2089b637d202285f0b601b8230899_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17c2089b637d202285f0b601b8230899_JaffaCakes118
Size

3KB
MD5

17c2089b637d202285f0b601b8230899
SHA1

1ad731d1d92c938c8a3e420256dc03c3859dd16a
SHA256

e4c7a27749c626a29cc1c832134c65602e0e6b0564ed318df3f57f498c01e80d
SHA512

e3e6c253f247ad96738f272b63d4cd6ca8187cad6e3acf9224f90d3d8322a0b2c05eecfc4ee496823f017dc9412f1ebffeb2a92a98e60dac335973e7911fd140

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17c2089b637d202285f0b601b8230899_JaffaCakes118

Files

17c2089b637d202285f0b601b8230899_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ