97774b9bff2d5f8218ed649a2e7ae81c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97774b9bff2d5f8218ed649a2e7ae81c_JaffaCakes118
Size

416KB
MD5

97774b9bff2d5f8218ed649a2e7ae81c
SHA1

287d1faeecad0ec68e02cb24955f87f5e264618a
SHA256

2efd0950f83b2226300119810cd0210f9b27c71d9a78cb1a4bb563cfcf21db30
SHA512

fb059f246bffc7c9b5eff469c2095cec2def4f25aaae563142cba90d55bccd229b1654160dc2c5c66891bbf4ea89b47b2a304ff2c8845b13482c1b4a6e65a6a3
SSDEEP

6144:kzQrzSoK6Dva2RDrkhER7tLP9L/HlOJycbbpIBUTO+LR03:DSR6DvagfXP989yOQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97774b9bff2d5f8218ed649a2e7ae81c_JaffaCakes118

Files

97774b9bff2d5f8218ed649a2e7ae81c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\ASUS\Desktop\Develop\Projects\GrandSteal\GrandSteal.Client.App\obj\x86\Release\Holivar.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 414KB - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ