14052f451057ed303898cbb787e9543c_JaffaCakes118 | Triage

Sharing

General

Target

14052f451057ed303898cbb787e9543c_JaffaCakes118
Size

5KB
MD5

14052f451057ed303898cbb787e9543c
SHA1

9cf69149efe24a423857cec0da45122125adbc08
SHA256

56c8be46df06c740abdc133d8dea87465dba82be42af6213939145cb34d06c36
SHA512

b963a1385dc2dca19516e21c4ecac2655b5d448a9a646ebf49292d342625dd1ef7e280e3bca6b6dccb9f365dddd0cbe5c62f043baf62eb1e995e4d0d93fcef88
SSDEEP

96:NEC/7+RjdplZWIm0CoLoZ7+MzIiPTwCQDHX0g5UkXinA92Mj8SWb++dTgWkvrF1f:NEq+JPWv0boZDsiPE7HXP5NcGvY7JdTi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Generator Nitro Discord.exe

Files

14052f451057ed303898cbb787e9543c_JaffaCakes118
.rar
Generator Nitro Discord.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Grecanu\Desktop\Thor\Thor\obj\Debug\Generator Nitro Discord.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ