802e26fb26368712d392dccb7c57e18d | Triage

Sharing

General

Target

802e26fb26368712d392dccb7c57e18d
Size

99KB
MD5

802e26fb26368712d392dccb7c57e18d
SHA1

838509786859163e4f3c487e5e0bf5595293afd6
SHA256

154bc65c400439e80cef5cc93c0cfedb5a81001c163a2fbad79ef3d28f8e2b5b
SHA512

3334be8ad82a9d50af9573d99505d8e77c22dd0e6015a0cf5735ca1232fc20e3dad86800097c72d7b3b86fe9c769b021dc94bf32736a2fec8c8bb80281ab719c
SSDEEP

1536:xnrYC7l3RekXesSRNsPO4DDCO77QH7iisYIhhKmdd97KK5PwXXkOVVmWt9RR:xnd7Xf3GNuO4DDOdmddnwXXRbRR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
802e26fb26368712d392dccb7c57e18d

Files

802e26fb26368712d392dccb7c57e18d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\My Documents\Visual Studio 2008\Projects\Keylogger v1 by hav0c1995\Stub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ