e798f67aaad0b932199d6e2062d2d4ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e798f67aaad0b932199d6e2062d2d4ac_JaffaCakes118
Size

11KB
MD5

e798f67aaad0b932199d6e2062d2d4ac
SHA1

147ae69007e2097c4b30bef00064ad3c305e3d49
SHA256

e0c454d7be30370be22a25b254ea01518da046912e73b6a6a1d5db7fad1e7dfa
SHA512

2fe85afa652724a691889c5dabbededb82a483eb96df01e84f636432ebfff46d80c6ece72a8fd8d6b16dcd4150de72ea763d935e83a8d34e77c52af68d298c2a
SSDEEP

192:Ft9Yg8uX4L0CEb7HIPfawNdDlBNDpMmoV5ZrcXzNU:FrYm7Ck72fawNZtpMmoVXcXzN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e798f67aaad0b932199d6e2062d2d4ac_JaffaCakes118

Files

e798f67aaad0b932199d6e2062d2d4ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\say22\OneDrive\Desktop\Discord Token Grabber\Program\obj\Debug\Dokdo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ