ed2c865fd99492cf686c3cbb6fba5ad8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed2c865fd99492cf686c3cbb6fba5ad8_JaffaCakes118
Size

112KB
MD5

ed2c865fd99492cf686c3cbb6fba5ad8
SHA1

7e7177d2d069649679d6b5ae3b98da88e4ad7afb
SHA256

87043ff6c8a1850f884a72fbbbb096adb87c4a1cda745a8de02de8ff190166e5
SHA512

a6b315362087b46b6d4ff83abfbb09bbdc1664635ce081bc2aa989381f5eca76b6b1d26701519441d93dd89917937d9bcacc49f06776960eee066ee879c1eeea
SSDEEP

1536:ShPyVQpg/TxoLgB1EAlxv8BmcrZN8KaldBioA5H7Col9Xf:WgWkBBxktDakoA5Hll9v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed2c865fd99492cf686c3cbb6fba5ad8_JaffaCakes118

Files

ed2c865fd99492cf686c3cbb6fba5ad8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ClearRSInfo
PutRSInfo

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.Silvana
Size: 208B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE