c0ab3968ba8c0350aaab73c25aa95e3d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0ab3968ba8c0350aaab73c25aa95e3d
Size

552KB
MD5

c0ab3968ba8c0350aaab73c25aa95e3d
SHA1

cfd8f54896072ffa42024a8474214e72e71ee121
SHA256

e575fe85b7869d7d52ba8f67b7dc66a537b973a3c245363eeeb85727610b71f1
SHA512

ac5381625dc930e2d3232d400285a32f5b8fc0ca02717d46d697ab2cf9681c4229afc353085ae945ea00e3eb8b84e7f1af0c8c7204258ee696615b1c032abb23
SSDEEP

6144:pXy1jUca5+gfpUOifCtaJppYWH/JskNAVNeN584eeD14ootXCn+hy:c1Yco+gunfCEAWfykqVNeN24emn0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0ab3968ba8c0350aaab73c25aa95e3d

Files

c0ab3968ba8c0350aaab73c25aa95e3d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Jesse\Downloads\Keylogger\My logger\Stub\Stub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 351KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 199KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ