c1aba1c8eec04b9a7fd5e2d862a550c3_JaffaCakes118 | Triage

Sharing

General

Target

c1aba1c8eec04b9a7fd5e2d862a550c3_JaffaCakes118
Size

128KB
MD5

c1aba1c8eec04b9a7fd5e2d862a550c3
SHA1

9fe1a9364fc78ec0059eba8737ccad1dd4c87576
SHA256

40fc988ccf9a9f2a3ae803846f1fb5810591a137d2add02989e982efa4176b97
SHA512

3ba5e86110741838a992d48ad989bed6f2d07d7ea7b7bb6a0fe1559e7eae6b666c5d2025ac210d282e4ca418e74dd9be825cb3fc3eb38822205251ae461939b2
SSDEEP

1536:Wd1nCFOTEyMQQjHcODQONc8+P93GFoFH32FmlD9/CNXS4w2lv902vKB/uceoI:GsFwQHr3cnPJgk2gDRd4XxvRZoI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1aba1c8eec04b9a7fd5e2d862a550c3_JaffaCakes118

Files

c1aba1c8eec04b9a7fd5e2d862a550c3_JaffaCakes118
.dll windows:4 windows x86 arch:x86

d71ff74ccfe699004afc74c243196b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

fdsksd.pdb

Imports

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetFileSecurityA

version

GetFileVersionInfoA

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ