18154cdf4c7a4a5ecd1dcff71d7da9bf_JaffaCakes118 | Triage

Sharing

General

Target

18154cdf4c7a4a5ecd1dcff71d7da9bf_JaffaCakes118
Size

3KB
MD5

18154cdf4c7a4a5ecd1dcff71d7da9bf
SHA1

0d8b978d492dcc849879c33c25e5e72b96084d14
SHA256

cbfb91ed27a66cd28ae590c7644f829e10e2cdf52dcd53345fbe9b84c39764e1
SHA512

c0472898aaaeda8b446fe83f44d15f778c724ba605c794dfa0d6baac582a355ea77005f3d9b0646cc1a9e995527c4a512f3a3c366f2d09cf26cc3bc56edda6cc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18154cdf4c7a4a5ecd1dcff71d7da9bf_JaffaCakes118

Files

18154cdf4c7a4a5ecd1dcff71d7da9bf_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ