a26d82ea9ace649d0c086a68b2d6e926_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a26d82ea9ace649d0c086a68b2d6e926_JaffaCakes118
Size

102KB
MD5

a26d82ea9ace649d0c086a68b2d6e926
SHA1

a49f41355de1771fa88827ea47d00297456a6a2e
SHA256

421448f20b4619be0243d1627feed26be4ecbbfc9e87501285c18264dd83f45f
SHA512

6911dfdbabeb35674eb799a6d7e694cd10759d621ed4ba79b99bc0fa74dac3e77cba1ec849b9fff81723452e5c75183ae449263aa022dcd3693ba3e8401511cf
SSDEEP

3072:4BA9scdT/+BIntv0AK9VI/m4S94hhGYzEGFwHkg4GPlZnZeoFTDs/RSul:4BksnXI/m4S94hhGYzEGFwH/v09

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a26d82ea9ace649d0c086a68b2d6e926_JaffaCakes118

Files

a26d82ea9ace649d0c086a68b2d6e926_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\rathe\Desktop\Qvoid-Token-Grabber-main\Qvoid Token Grabber\Qvoid Token Grabber\obj\Debug\Qvoid Token Grabber.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ