b12b1af1aa7064331941fd5d89f26a71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b12b1af1aa7064331941fd5d89f26a71_JaffaCakes118
Size

132KB
MD5

b12b1af1aa7064331941fd5d89f26a71
SHA1

ae824fbbdf8e88a45e71d42993a68fb06b3dcdf4
SHA256

95643c5b00bedbb626f5a426ef7d0d5bde3ea9c0ca835871f6ecfb132544813f
SHA512

5ac0222af6ccb8551730b4681b97b2833bc16f70d54d678a06c9021cb052b6996674a4d3fe6206c48a14638e50c2d8214647e532aea1ddc980cc32c2ec25a1c8
SSDEEP

3072:WPvD3H5QsYaFREidoCoz/775LxM8NUSyOAsH4CSvAIApe9N:avrH2FafEieCoDViX5CSoIb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b12b1af1aa7064331941fd5d89f26a71_JaffaCakes118

Files

b12b1af1aa7064331941fd5d89f26a71_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

4fbdsv984o.pdb

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ