8e48b62651695b2250f7450a6cf1b082 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e48b62651695b2250f7450a6cf1b082
Size

792KB
MD5

8e48b62651695b2250f7450a6cf1b082
SHA1

f18e68407c4e16f7dc5f63b8c080c1316a05b37d
SHA256

58fe29453f7ad019804c8a256f64595e7de21a754d20b1fe444bb9bc9e7bf0b9
SHA512

3a8f960f1603302dfdfcce36a4725bf328ee5b16fa90c90d26073de74bfdb15e8a386cb792a0f8d733ec7047d2e1ade44588af94098bdc828eb30fdcce784c81
SSDEEP

12288:uCWHdQpBjsN4WX1bWuDco3D0NYWXpwWuDcoip+:uVO3UbJn3KwJnip

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e48b62651695b2250f7450a6cf1b082

Files

8e48b62651695b2250f7450a6cf1b082
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Revalation\Desktop\Revalation Keylogger v1.5\Revalation Keylogger v1.0\obj\x86\Debug\Revalation Keylogger v1.5.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 467KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 323KB - Virtual size: 322KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ