402297dc8ff4fc74993793b56d88df96_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

402297dc8ff4fc74993793b56d88df96_JaffaCakes118
Size

546KB
MD5

402297dc8ff4fc74993793b56d88df96
SHA1

c8f635c2b32ff8859e66739a49d8c931fd7a611e
SHA256

21b4470e649b0e1770adc5f032ccf910d0a28d5083af9e340f2f0baba30d1aa2
SHA512

a60dd87f93d2199a4eac2650b2c08c6a896d18494a3973df795fdfc4052c297c3b9599af6c70476ff04d9e000ba5d89da09f1518c9dc7cdf91b33ee2ebaf2a93
SSDEEP

12288:BjndvQSrrXvbGIqBGr1r+96I8r7Y/w9rI6lUNB:BLJ5qMr1KYI8h9rhl8B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
402297dc8ff4fc74993793b56d88df96_JaffaCakes118

Files

402297dc8ff4fc74993793b56d88df96_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\CB\ARM\BuildResults\bin\Win32\Release\AdobeARMHelper.pdb

Sections

.text
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.jgd
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE