bd25e632b9bf768484eb9f2c667219d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd25e632b9bf768484eb9f2c667219d3_JaffaCakes118
Size

132KB
MD5

bd25e632b9bf768484eb9f2c667219d3
SHA1

38e4be317b66eb716178628de738c9eb62fefc8c
SHA256

c3bb316802b041596c16f1f02afd45d1eb7f94aaa2ec9ef0724e39048325ba95
SHA512

77ad246c201e43fdb57115090e6ee74b63c465fc8561b4e3b2616998f51eb9e483f123667dad58da9bb0e297541f1e28b5901f438eed7ab14f93330c50f91443
SSDEEP

1536:V6LMpwIA1tQmyXRQRHcODQONc8+P93GFoFH32FmlD9/mr7Vvni2vUuTSfM4p:VfyQtKHr3cnPJgk2gDRwtBvUuTQp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd25e632b9bf768484eb9f2c667219d3_JaffaCakes118

Files

bd25e632b9bf768484eb9f2c667219d3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

fdsksd.pdb

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ