3ca6445ec06a4c2e2a013030b0d5b124_JaffaCakes118 | Triage

Sharing

General

Target

3ca6445ec06a4c2e2a013030b0d5b124_JaffaCakes118
Size

3KB
MD5

3ca6445ec06a4c2e2a013030b0d5b124
SHA1

7c6c7239bd7cbeb47ced80f3da757fe5e673472c
SHA256

c5261b081114f764f2449b0300f97a2fe01b1053cdbc3d58a64061d5cbb392da
SHA512

89ee5dc57d017d9b130905011b00ba22c0564a415079cf80cdeff15de750d8bb6a732f7ba3a3ae29b570b86a0fb535e08ff22889df721b20bf3c86215ad4a0b9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ca6445ec06a4c2e2a013030b0d5b124_JaffaCakes118

Files

3ca6445ec06a4c2e2a013030b0d5b124_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ