4b6530eebc5ef6b2c381de5f96600986_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b6530eebc5ef6b2c381de5f96600986_JaffaCakes118
Size

102KB
MD5

4b6530eebc5ef6b2c381de5f96600986
SHA1

b6eaff439cd2a5045b612b3bf1423f283a2b798d
SHA256

62ccec2f169ae21386a057c8fa07a869b11e36f4426fec39caac105ddac0a7db
SHA512

f376d16441dfc711471ac807f7db4de02cd667e2a99bad53e6454eef6760d8619028e60fd463c2426f8a5693fd6e4ec653855bfc1cce68d64f613ccd8f1cad12
SSDEEP

3072:nBA9scdT/+BIntv0AK9VI/m4S94hhGYzEGFwHkg4GPlZnZeoFTDs/RSgl:nBksnXI/m4S94hhGYzEGFwH/v0X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b6530eebc5ef6b2c381de5f96600986_JaffaCakes118

Files

4b6530eebc5ef6b2c381de5f96600986_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\CUTECAT\Desktop\Qvoid-Token-Grabber-main\Qvoid Token Grabber\Qvoid Token Grabber\obj\Debug\Qvoid Token Grabber.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ