a819566038eadc57c3dd00bb4ef79445_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a819566038eadc57c3dd00bb4ef79445_JaffaCakes118
Size

132KB
MD5

a819566038eadc57c3dd00bb4ef79445
SHA1

38b3d970f3665bff84341f3d3b5153bad4796d7c
SHA256

91025ef7a474629c837fb236eeaf91a786866f5f33a3204010cdfa3a04cb2ed1
SHA512

edbcef193c8f8f3cd8f2ece04a8e1e399a4a3952ffd09cd7125d83d28e244fefcb004283d5c33f202a1130e0e8df984a5ed708fb443d6111a1a07b8af07eed7a
SSDEEP

1536:TyHg3cxP1yYNQUHcODQONc8+P93GFoFH32FmlD9/47aBTsvQ2vamQdUcrWEcKods:2nxN7Hr3cnPJgk2gDRfWv5QVaEd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a819566038eadc57c3dd00bb4ef79445_JaffaCakes118

Files

a819566038eadc57c3dd00bb4ef79445_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

fdsksd.pdb

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ