b99087e9e12063583645ddfeab1f9cea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b99087e9e12063583645ddfeab1f9cea_JaffaCakes118
Size

124KB
MD5

b99087e9e12063583645ddfeab1f9cea
SHA1

66150282512270523bf9f129af04bd74cb40ade9
SHA256

942597ed2ec992b132274af21cb1365696e7979fa25d11c2414fc4f676bac3d3
SHA512

a05ee3b7e1de97e05b9c28944b60626b68f759a51c2c0b8d2c1bbd8baba8f40159103f970aab831521ead5aad190ca1c35024d335668b5885aa2f24e7eb7573c
SSDEEP

3072:gF4a/5IPAct8ZW006EChKeC7H2M2AyHH:gF4a/5IJ00Le+Ht2AEH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b99087e9e12063583645ddfeab1f9cea_JaffaCakes118

Files

b99087e9e12063583645ddfeab1f9cea_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

fdsksd.pdb

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ