snakekeylogger | f17d7acdafb5ef96e8921e67437b69876be67e171bd9eb366f94504d406fa538 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f17d7acdafb5ef96e8921e67437b69876be67e171bd9eb366f94504d406fa538
Size

152KB
MD5

b909154f08a9284d90729141032e310e
SHA1

9d3bb6493ab0f012ad92ab03f2e4de6e8daaa96e
SHA256

f17d7acdafb5ef96e8921e67437b69876be67e171bd9eb366f94504d406fa538
SHA512

93dd180add0c2403c47cea0a0d8e2498a64bfb240911a7f729556997588704de3c3bcf1c7ac5ae8e4e1553928bf1c5c2dc34409f1c262022364cb702c148b088
SSDEEP

3072:RmtcXls3dJrDKfTHWDivab8FNwBPBFbY:/C2DYivabMK/b

Score

10^/10

snakekeylogger

Malware Config

Signatures

Snake Keylogger payload 1 IoCs

resource	yara_rule
sample	family_snakekeylogger

Snakekeylogger family
snakekeylogger

Files

f17d7acdafb5ef96e8921e67437b69876be67e171bd9eb366f94504d406fa538
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ