2996c8222514a48c79bf3be3aeebb7f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2996c8222514a48c79bf3be3aeebb7f8_JaffaCakes118
Size

112KB
MD5

2996c8222514a48c79bf3be3aeebb7f8
SHA1

5d37609ed646d2159d2f1efbc199ca3e48ee4c78
SHA256

7b1b9bf93f902599407dc4f65229440ba421dd1dd6f99d72e45a875bfb1dc409
SHA512

37a2b6d00ab2cfd7d1f8cf213481cc30138d427dded3365d8fbc4562f3f3c16c56d2b657c9dd6007385a1629e2dc1c7316db489069e4311a2c367acba4b783dc
SSDEEP

1536:S1PyVQpg/TxoLgB1EAlxv8BmcrZN8oaldBioA5H7CoRXmUiuUn:igWkBBxkt5akoA5HlR2cUn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2996c8222514a48c79bf3be3aeebb7f8_JaffaCakes118

Files

2996c8222514a48c79bf3be3aeebb7f8_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

ClearRSInfo
PutRSInfo

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.Silvana
Size: 207B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE