3f5268db954b02fcf9293631bf066eb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f5268db954b02fcf9293631bf066eb0_JaffaCakes118
Size

27KB
MD5

3f5268db954b02fcf9293631bf066eb0
SHA1

deae98580b5c1ecea4f4db6e9f65d29246f7db2a
SHA256

470d88bdb5ee269ec8aba822595891b6e985c957d5de7a3c1538715909010075
SHA512

449a7cc950f1d5d026581753710764ed198d2bdaf4f8ad7fa1b66fded14b204cfacf2dc01abd4149155c1d8a8a9397013619a4593d2c430ec67142f83dcd4dab
SSDEEP

384:/lzK1t1fmoshhJ9BziE6UcvjZGB/oxl+A/VWwD4hY4cX51A93s18aHJyWM226Rfi:t6+hNZbhmGSxthgYtX5178uyCLM7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f5268db954b02fcf9293631bf066eb0_JaffaCakes118

Files

3f5268db954b02fcf9293631bf066eb0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Users\Killian\Desktop\Proscry\bot exostyle\token\AnarchyGrabber\AnarchyGrabber\obj\Debug\NitroGen.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ