84646f250eabf15a1a584caa73550957_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84646f250eabf15a1a584caa73550957_JaffaCakes118
Size

128KB
MD5

84646f250eabf15a1a584caa73550957
SHA1

aebe77d8f3fffac6cc1bcf2a7fd04e7dc60ade0d
SHA256

9b3ddf219349f131817e43a8bd0fa72b01842fa4f60ffed041dd823e3e7f51ed
SHA512

06bfa2263b22158765093e62af9823c8280411e01f31bf98d5557c9888629f4ff71f5beb93c67293fe0b681e6df6852707a8b316e60356ed3ea702a40cd45c40
SSDEEP

1536:8Lkwo71Czzys9QzHceDQONc8+P93GFoFH32FmlD9/687N839f3tEekHqvT1kI0Wv:am1G8H73cnPJgk2gDRz7K3JtmKvnaE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84646f250eabf15a1a584caa73550957_JaffaCakes118

Files

84646f250eabf15a1a584caa73550957_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

fdsksd.pdb

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 498B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ