02deca90e78cff92e4b13e4bcf8181dd_JaffaCakes118 | Triage

Sharing

General

Target

02deca90e78cff92e4b13e4bcf8181dd_JaffaCakes118
Size

518KB
MD5

02deca90e78cff92e4b13e4bcf8181dd
SHA1

7120906e54d45c5ac4e28a9767f67be7041d81f9
SHA256

05ba183783e119e4d64631ab8cbd393a4ffa084f754d16f3ce72dbacf25693a2
SHA512

acae1a29e4ed548060e569bbfcbbb696a5f316b2236e0091ce9f218a3c22cf8b5c7ba9018c3e5d120b1722894d193f0e7b0fa09984cafa88ae9cdabb7a88af3c
SSDEEP

6144:N+9dVYc7/0DIFVuMYk8LHFcrbXsCNytxZbdq+R1y9d2DwfS/NxF7FIz2FhWFfgmY:C/0Dc7Yk8zFcetxZLDZY2zWZgyO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02deca90e78cff92e4b13e4bcf8181dd_JaffaCakes118

Files

02deca90e78cff92e4b13e4bcf8181dd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\CB\ARM_Sustaining\BuildResults\bin\Win32\Release\AdobeARMHelper.pdb

Sections

.text
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.uro
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE