237dcba926f68d809230a71529172e4c_JaffaCakes118 | Triage

Sharing

General

Target

237dcba926f68d809230a71529172e4c_JaffaCakes118
Size

364KB
MD5

237dcba926f68d809230a71529172e4c
SHA1

350ef285178655aa95e49b51957ec14d9e36ba78
SHA256

f32f0d0bb54491c4c51a1ac17e62ede428373bb0130acaf6ac544c5b7b83e949
SHA512

8dd34cf5c04c8d2de31338da1abed2dbb0474f99198330fbe69a5a0f37a3027ccf70ea4d9647447477d1a1d446dfc621ab834b95117b8bcd67ed1cf18f047b30
SSDEEP

6144:CbiAcw/EX+wGuJaFZpDb3u8zh+QKbbvQpUhXVf7S6jrJyqp9xYsMgiN:C+tHX+wMZpDbVz6aUh57SjCMgG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
237dcba926f68d809230a71529172e4c_JaffaCakes118

Files

237dcba926f68d809230a71529172e4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Garment.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 353KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ