5b2bf0febd3284c05881a306283930c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b2bf0febd3284c05881a306283930c1_JaffaCakes118
Size

50KB
MD5

5b2bf0febd3284c05881a306283930c1
SHA1

81ff3dd7aa70a85a5825746fe7cc4fc872100e34
SHA256

f21107d8229be8a3a7aaf99a20c206ee6f08f09484d73e508ca10f3744cace82
SHA512

ab83c67105b5953f98848e0d29d585685942072edac04d85ff5deb8dec65c125dc7cf78b645f9138cc43a47611cd0f27f78d329dc40586bef58a0124e1fe6d39
SSDEEP

768:xZtKp69ycpa9fsPDsQNghwRuRnjjkPAAfltS0bEoH/RCiTRpdJwmK69Tftz3DJ+E:xDA6mj69D5H0699BVZ1+Y4VYIE7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b2bf0febd3284c05881a306283930c1_JaffaCakes118

Files

5b2bf0febd3284c05881a306283930c1_JaffaCakes118
.exe .js windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\timmi\Desktop\AG3-master\AG3-master\AG3-master\AnarchyGrabber3\obj\Debug\DiscordNitroCheckerV1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ