d0ec8ee53d746484b1c07acb1b754190_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0ec8ee53d746484b1c07acb1b754190_JaffaCakes118
Size

9KB
MD5

d0ec8ee53d746484b1c07acb1b754190
SHA1

e687f92c861a7082334e9a9c1becbf1b0b739141
SHA256

5e10225be8452150b081af8481f7a9e9cda51ba51c070c328e0dfaeafab9a41a
SHA512

f83ef1375b0b8e93fd4cbe9abf1d35719aa5cab761d9a688939f2a98fcfbc80487121c240cc07330aa54681a0c17afb406eb1c768bb0ec1fdfec51ac9011f153
SSDEEP

96:SUdIiTghbzNaqXQSr1vEzQJBfOMoU0Q92yVg8LUyPVicAQ32P7HeozNt:Nei8PVxVEzifOMooVdAQ3E+q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0ec8ee53d746484b1c07acb1b754190_JaffaCakes118

Files

d0ec8ee53d746484b1c07acb1b754190_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\qxybu\Desktop\AnarchyGrabber-master\AnarchyGrabber\obj\Release\AnarchyGrabber.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ