General

  • Target

    60a89cdefa042acc57a8b2bd2adcd184_JaffaCakes118

  • Size

    716KB

  • MD5

    60a89cdefa042acc57a8b2bd2adcd184

  • SHA1

    447dd4094bc8eb51c61b0a8bb0161e0c1334a878

  • SHA256

    bb713554f66e7973e2878febc7736abe40da22556aed5e5a39d6c08305d2c3b4

  • SHA512

    8d6c3267cdd9a4eb91a971fd43054e3efee6ddf797883776ce331fb93923b3bf2114bf3c8fe6ea7d6ff29412250e95315d21a7c3ed1a6c4f5d540b4e8fbb372c

  • SSDEEP

    12288:yC07qbgaPhrnZAeWP7hOGISw27xjRdVLU257PaR4EG7:CebpP9nZAeM7ctWJ7PGE7

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 60a89cdefa042acc57a8b2bd2adcd184_JaffaCakes118
    .dll regsvr32 windows:6 windows x64 arch:x64

    0530d07e39706fc98aa6264fc0b22f8c


    Headers

    Imports

    Exports

    Sections