snakekeylogger | 4893f0297e7529972b91768d1ff8a423[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4893f0297e7529972b91768d1ff8a423.exe
Size

127KB
MD5

4893f0297e7529972b91768d1ff8a423
SHA1

b7ca10aa0ece7855917ccfd37a6653b48d4eaa76
SHA256

edbc2a3471d87508b3e4b9174ab90a6a04529a2cef9373e3e1b4f3d97fb3afaf
SHA512

4c459bf6f98525089a7ed28631a696f4ea91810c7afd183b36ac9ea2927d3a5495c7a9f38e223cb4bf0602e12a95f84c01061311dcd379732affb62623d8b86f
SSDEEP

3072:WAgAEkoHj/LDdhVj0b8UCNIzwBj2OFbY:LxW10bHCNJ26b

Score

10^/10

snakekeylogger

Malware Config

Signatures

Snake Keylogger payload 1 IoCs

resource	yara_rule
sample	family_snakekeylogger

Snakekeylogger family
snakekeylogger

Files

4893f0297e7529972b91768d1ff8a423.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ