89d4a05b5dc41da6a1067152007a787d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89d4a05b5dc41da6a1067152007a787d_JaffaCakes118
Size

120KB
MD5

89d4a05b5dc41da6a1067152007a787d
SHA1

b51c4d5cc35712606b68cdc57adb2c29dd97bb27
SHA256

1c516646482b8b0efd0b7da1930f6058f4f209613774911741b1d850e2b7dedd
SHA512

8e823f0aa9c886086d58c06e40e0700878be66b8f11a4815c8d5fc4d28709f5aa78800636dcc55795f90e7876a13282c24e68d5b28b8a0fc7eff9bafa1aacb54
SSDEEP

3072:nz6pet0HgEM8GIIzn3EG/NVeV52yXmcCl7Wry:ncgXF3BaVEUmcUWW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89d4a05b5dc41da6a1067152007a787d_JaffaCakes118

Files

89d4a05b5dc41da6a1067152007a787d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

fdsksd.pdb

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ