General

  • Target

    70a7f624cbc42a326a86962a55effdc5_JaffaCakes118

  • Size

    653KB

  • MD5

    70a7f624cbc42a326a86962a55effdc5

  • SHA1

    b220ad781005441fd68c5ddadb317e06f6d59fc8

  • SHA256

    1f0f05d048789e676422c19867821aa2ba2c3624f7f70dce71b6dadf45cc6050

  • SHA512

    a588011bcef3bfe5ca4295e033fd5dbc571c63510ff4727d871187211abeee730b286ac9aea8b5f00aaadf9b3eb91dd16d7a0ff2dcfd5fa16800dec63530f754

  • SSDEEP

    12288:1F7dIH3kMwvDn11X1Y55huw87t63KfsVc4xW5E+yYNTPkEpaedfamoR+Xz3uM4+V:1F7da3kMWz1AKEVlO9ygkEpaafsMze+V

Score
10/10

Malware Config

Signatures

  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 70a7f624cbc42a326a86962a55effdc5_JaffaCakes118
    .dll regsvr32 windows:6 windows x86 arch:x86

    601c789837513c42e3ba0760fc5e8986


    Headers

    Imports

    Exports

    Sections