2533fcb5e8f3b63cd964b69e95574755_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2533fcb5e8f3b63cd964b69e95574755_JaffaCakes118
Size

3KB
MD5

2533fcb5e8f3b63cd964b69e95574755
SHA1

382941798c2f9dcd889bc3712c27ad68f9266bc2
SHA256

e022d5311cdcf399f7e08ee9f402990523278c032383e30903cb875f9d95216f
SHA512

76a47e705b96b889760aa570ee80651092f6f9046a669a8f78e50d0bfb39fad4f46eb296f96180ee45ddcd6dec25631a56916d665211d70a24db1a38c5304b03

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2533fcb5e8f3b63cd964b69e95574755_JaffaCakes118

Files

2533fcb5e8f3b63cd964b69e95574755_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ