0816d37fa33e3b8f96d75bc531612b82_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0816d37fa33e3b8f96d75bc531612b82_JaffaCakes118
Size

56KB
MD5

0816d37fa33e3b8f96d75bc531612b82
SHA1

18901d1830bccd63a8d27e82f0c96b3c5e5eb067
SHA256

c65e5c49fb570a389371aba41bc8f12b0dcf80a57909d0cf494d61cc3ca89908
SHA512

0ce1c9a61b0b63a5b738892c7150bfb5b90022c5f873bcd7edf27a16377b0951d514ed048834362f47d1e9c2434da444cf135ff5e489b6869b100f737e5d2339
SSDEEP

1536:dIqCy41XEFUoVtw6GvRNE+Ji4IReOg8OvfXULTez:mi2UFUyw6G5LKsRnELT4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0816d37fa33e3b8f96d75bc531612b82_JaffaCakes118

Files

0816d37fa33e3b8f96d75bc531612b82_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd961355b3039e5f53a33d53a342079a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSemaphoreA
GetThreadTimes
lstrcpy
LoadLibraryExA
CreateMailslotW
AddVectoredExceptionHandler
InterlockedPopEntrySList
GetVolumePathNamesForVolumeNameA
WritePrivateProfileStructA
ActivateActCtx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE