snakekeylogger | 1484-64-0x0000000000400000-0x0000000000426000-memory[.]dmp | Triage

Sharing

General

Target

1484-64-0x0000000000400000-0x0000000000426000-memory.dmp
Size

152KB
MD5

277f0bba4cad0e78e3bc96a753a41110
SHA1

4a4a9bcc08e7971586fa1282044b2ac75577b04b
SHA256

f9adb2da841d5740c4048a19dc8bdcdb2608b5aabb485d3662f01269ce16953c
SHA512

b2c8a229f95b0edec854e5220a19ce031c8b2fe01db02be7d07fc4e2d0080f5888e610c5dd307150761fabff19b46f05c262f1aa44003f2d1d4a2a0e0b634af2
SSDEEP

3072:BhdySkgFGS3UsW1uzueQpGQb8o3yBtwBB8:YSkR/USbeI8

Score

10^/10

snakekeylogger

Malware Config

Signatures

Snake Keylogger payload 1 IoCs

resource	yara_rule
sample	family_snakekeylogger

Snakekeylogger family
snakekeylogger

Files

1484-64-0x0000000000400000-0x0000000000426000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ