a77e1cd71b0ab9faf3a045f58ab9b5f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a77e1cd71b0ab9faf3a045f58ab9b5f6_JaffaCakes118
Size

37KB
MD5

a77e1cd71b0ab9faf3a045f58ab9b5f6
SHA1

84c8b90f22e920a5f0ff4a6764ef084108f4adcf
SHA256

a081a6908e268928f569cc90af2bc59c3b464239155722f74be9b4a4dad53dfa
SHA512

81241d5b48c8d697d75d2561738df0c3e0d6762dd2b7a315a62fc66628018930f7c6ec09213753ce5f101bac7489874449c2d72c376cd1b25db1dfb05c2647fe
SSDEEP

768:/bYC5h6666666666666666666666e8phyl5yrS5vr2q9:/PWinGP9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a77e1cd71b0ab9faf3a045f58ab9b5f6_JaffaCakes118

Files

a77e1cd71b0ab9faf3a045f58ab9b5f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\encry\Desktop\Coding\Token Grabber\Atipoz Grabber\obj\Debug\FiveM Dumper.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ