General

  • Target

    17d9ef11eacdfa6c4c2d22441804daf5_JaffaCakes118

  • Size

    717KB

  • MD5

    17d9ef11eacdfa6c4c2d22441804daf5

  • SHA1

    b2e32db12f60d15af5684ceef7eb6749f800329a

  • SHA256

    7834583a130b9ab3929a6c3ceac288888f351159768fd9d4248b56fa4ab4c3d3

  • SHA512

    6baa26eef2f283f42677bbc6d137b41e6806cf41177a8e4d1a6e2a87fd67887086656075a8d19ac7069d2e4504e5981c95e1a8313acf316fba7b5d0f024a16de

  • SSDEEP

    12288:fPoTD0MIdahl/PhAJIGmNY6Y3RgQgynxkAJLwnd2ui0nxkAqWAy7v:4f0tdO/PhAJzmy6QjgYKYLwcuZKKH

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 17d9ef11eacdfa6c4c2d22441804daf5_JaffaCakes118
    .dll regsvr32 windows:6 windows x64 arch:x64

    0530d07e39706fc98aa6264fc0b22f8c


    Headers

    Imports

    Exports

    Sections