Behavioral task
behavioral1
Sample
Jordies Cookie Logger.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Jordies Cookie Logger.exe
Resource
win10v2004-20230220-en
General
-
Target
Jordies Cookie Logger.exe.bin
-
Size
239KB
-
MD5
4f5db82ceae051a334e9934a8f04654e
-
SHA1
c2718aee26af1ea6fd7a79493856acf04a4ecc7b
-
SHA256
1d3c2f8e3ea55e8c6bd2ea0f4e6c9af2f46b18b2ee6b1bb0b84989ec3aa35afa
-
SHA512
99994eecbd54778fe3eb048616320fd9286ec4ccbc498b3646e7f04ddc7d16da4bc19f2f7a7f03f2496356110f51855f947a8a8e6a077b66d573aa957db656fd
-
SSDEEP
1536:yc1FGfdHQmRcUemWTdF7E38QXjmDP1ssFRj8GIrE0Kh:z1FGfPebTdF7EMojmDP1nR7
Malware Config
Extracted
mercurialgrabber
https://discord.com/api/webhooks/1102311336144281651/AggFDc030bCWL6dhEwpzvuepwnDNY48ohf4BcCNpOjj5RGlV9Top-zhP77-q70dVzYx3
Signatures
-
Mercurialgrabber family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Jordies Cookie Logger.exe.bin
Files
-
Jordies Cookie Logger.exe.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 199KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ