d5f53a8bfd9be3242f999be3aa78c23f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5f53a8bfd9be3242f999be3aa78c23f_JaffaCakes118
Size

3KB
MD5

d5f53a8bfd9be3242f999be3aa78c23f
SHA1

4a62a506a0a4a8888bbb647b9ce695199ba90956
SHA256

0b6feb7b8e24b93446702b3817d27a781e3ae0bc02dd7d4cb6873fbce9372543
SHA512

41ee5dd7a06de88a4491305bac6df5a28d34a1e56927833e9128e5d7cae5e73566058e9ed38cb0c285b88928f90feb8e1bc59980142625df4a025c091d393b93

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5f53a8bfd9be3242f999be3aa78c23f_JaffaCakes118

Files

d5f53a8bfd9be3242f999be3aa78c23f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

76054051be54cd3b471caaf230e466f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetStdHandle
SetConsoleCursorPosition
Sleep
SetConsoleFont
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
GetConsoleCursorInfo
SetConsoleCursorInfo

msvcrt

_stricmp
strtoul
memcpy
_kbhit
_getch
putchar
printf
__getmainargs

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 656B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE