eaf793e6f74df94730e73fc7f271cfa6_JaffaCakes118 | Triage

Sharing

General

Target

eaf793e6f74df94730e73fc7f271cfa6_JaffaCakes118
Size

4KB
MD5

eaf793e6f74df94730e73fc7f271cfa6
SHA1

80445452ce19a625e3badcf21cf295c690c63e3b
SHA256

05ac3a45f431f5564f84373c75ff649b24078695ab526c286c383ef8161c1097
SHA512

7ad73f632938eff74dd1e20f199aeeac8e67b7cd84367526e9f7869f08bc657794f2baa5982cb22383a3535b947c15f6a6a8e5143ccc97613770b1f4f1600cb8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaf793e6f74df94730e73fc7f271cfa6_JaffaCakes118

Files

eaf793e6f74df94730e73fc7f271cfa6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

08d63218d72612f09a5d7f02ff2a5418

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasExesLengthA
CreateDirectoryA
SetConsoleNumberOfCommandsW
EnumDateFormatsExA

user32

IsCharAlphaNumericW
InsertMenuA
TabbedTextOutA
ChangeMenuW

gdi32

CreateColorSpaceW
GetTextExtentPoint32A

Sections

.icode
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 512B - Virtual size: 394B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 512B - Virtual size: 430B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ