f38f5a5a71804bce35004ed657d83d29_JaffaCakes118 | Triage

Sharing

General

Target

f38f5a5a71804bce35004ed657d83d29_JaffaCakes118
Size

518KB
MD5

f38f5a5a71804bce35004ed657d83d29
SHA1

77142a6e3dfe569e6ba514238841e4f2eac98363
SHA256

066370be7b71ffeabbebb3bbf10fc509fa586ef25c5d891aaeb8558b6f024292
SHA512

16ac571e54e13063720905468a11bcb988f7cebc36ced4aa3c53bfd3558b5ff2314da7f98fc5e86117036079397807074919ac80fa1a61a9298e6f9e2458f084
SSDEEP

12288:d/0Dc7Yk8zFcetBZrtWVAvnu1kESXOKfjNPeC:SFkqcetBJSAPu1kEMOePeC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f38f5a5a71804bce35004ed657d83d29_JaffaCakes118

Files

f38f5a5a71804bce35004ed657d83d29_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\CB\ARM_Sustaining\BuildResults\bin\Win32\Release\AdobeARMHelper.pdb

Sections

.text
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.zwt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE