General

  • Target

    0a2c856348f2c75b14d34a4e246df551_JaffaCakes118

  • Size

    709KB

  • MD5

    0a2c856348f2c75b14d34a4e246df551

  • SHA1

    0077e64956b2bcf694417947b5b8a9f919f4c0ec

  • SHA256

    82def950c1fe7e1545cd6e245c6861adfe33fd39dd2b6f0dae3e8caba76712dc

  • SHA512

    664fdc95cefc8f3acd76d88ce36528da04c0c883d21765a986e82af0f5a6425123e6deda105cf6b1ba9240afcebd46acd90687c1b141abeab876a8c1f4411559

  • SSDEEP

    12288:HRs3i+AjwwZlllANBzKX2H3MOOCt7aBp5lEBilN1ncSD1LQlHTqK2p:xCi+2Rd7p5lqwncSD5sqbp

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a2c856348f2c75b14d34a4e246df551_JaffaCakes118
    .dll regsvr32 windows:6 windows x64 arch:x64

    5d332e3a9197d191215d5bbd00369d3c


    Headers

    Imports

    Exports

    Sections