General

  • Target

    fb3c3c8680b7f963679da59838ede0f8_JaffaCakes118

  • Size

    600KB

  • MD5

    fb3c3c8680b7f963679da59838ede0f8

  • SHA1

    5ef5091160588bce156ea1b5624cd3bff387cb5b

  • SHA256

    783a72dd8d599a2805b13acd8fa48496e195c1434dbf724c6d9c4817aab6bd15

  • SHA512

    75f301b72a84ac0481b8e163ba40bd329522f7f62f57dbdd93a00d7cd2e3db612149192f3079c1592d56330482c04ec5c9d43a49d9aa91d1261b5a0ad56b46af

  • SSDEEP

    12288:/rmnYNA4iHU2YBpO2iCXNGAkUoMQwKsQauTcYoRMSJtQqO6W:6nn4yUFLioUAkU3lKaQhSJtBC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • fb3c3c8680b7f963679da59838ede0f8_JaffaCakes118
    .rar
  • cleanrams/CleanRam.exe
    .exe windows:4 windows x86 arch:x86

    e3a8e9dac5439398b210e995d8e3a504


    Headers

    Imports

    Sections

  • cleanrams/OSXP.ini
  • cleanrams/Setting.ini
  • cleanrams/SkinPPWTL.dll
    .dll windows:4 windows x86 arch:x86

    8415b02065effcf3e8ba3b1c65054435


    Headers

    Imports

    Exports

    Sections

  • cleanrams/cleanpro.exe
    .exe windows:5 windows x86 arch:x86

    821c455b475c3595aa1e4e6ad93e77fd


    Headers

    Imports

    Sections