CashCat[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CashCat.exe
Size

518KB
MD5

e22f15441e597430b069dad9f72889fc
SHA1

6310f4db3726fdb52514718a402ede2db38c71bd
SHA256

fa6855733a1cca500f3088b535808fc8093d67cadc9b34ad4ca7ec0170b25e03
SHA512

b23e6c94b64cc18b42bbd6c95f07e335fb631fc8a003b01a64671e01067dbf8fa265cd4df30c6bfaca5ec61c068fa41d64b28b3c90bd88a1ee12ec13c7197469
SSDEEP

6144:q72bZqUv9tQslcXk78IkGfCbzslaUqdLhz2Zx4W3py8Zz4l:u2DzflcpI/CbzsleeZR3pHZ4

Score

N/A

Malware Config

Signatures

Files

CashCat.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 345KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ