740a4dc1ef9e6ee4f70fc3b44c00b922_JaffaCakes118 | Triage

Sharing

General

Target

740a4dc1ef9e6ee4f70fc3b44c00b922_JaffaCakes118
Size

1.5MB
MD5

740a4dc1ef9e6ee4f70fc3b44c00b922
SHA1

344b261902dca0e21f05c5453c7dbef69843b2fc
SHA256

5bcdd9bad2d206019a6323802dc4284aef7e5a8405c8323f7e14f47bcf791fef
SHA512

9d56e278f37f8684428d9ad599f2c33f78f555b5e85f360ac9ddecc42333d188761942582ac0ded163b9324ac1b380788ba323050f96c86b02f29bd2a795bcf4
SSDEEP

24576:AeK6glJf/PHBSiDFTThW5K9bjyObJFdcHPZSPB4cVKfcfc2w+/Guxo/u2EJa+y:QJf3h5FT6Ob3bMPO4cVK92h/TaB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
740a4dc1ef9e6ee4f70fc3b44c00b922_JaffaCakes118

Files

740a4dc1ef9e6ee4f70fc3b44c00b922_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.zuar0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 11.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.duck
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE