368282de8f61d39ca3b73257206f9c37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

368282de8f61d39ca3b73257206f9c37_JaffaCakes118
Size

1.1MB
MD5

368282de8f61d39ca3b73257206f9c37
SHA1

0958ad5c56d1c7909a501c795917c5e7f9d6801a
SHA256

41321bb618d50895260fc1c2329cc6bfd9f4943b033e0c3cff4c08a4a2abb982
SHA512

59cce49dcdf073d33b074e429c9bf9752bdeb40fab0cd0ff496759b2a2cdc61857f962fa26abbc4063b201bcc00acba3cee261338d0f022a0f3c3a903784f1e0
SSDEEP

12288:rjvsdKL7CU02GPCkKWxcWNpJfjxz58q2ynLZyBwUM0s2qwfH80I0aN8GJ:rrsdtz2GPFcWN1zmq2y4BwAsCc0IdyGJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
368282de8f61d39ca3b73257206f9c37_JaffaCakes118

Files

368282de8f61d39ca3b73257206f9c37_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

n:\ARM\BuildResults\bin\Win32\Release\AdobeARM.pdb

Sections

.text
Size: 403KB - Virtual size: 403KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.jgd
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE