ca0a4e621508b3434a3c6d1c0e2544a5 | Triage

Sharing

General

Target

ca0a4e621508b3434a3c6d1c0e2544a5
Size

56KB
MD5

ca0a4e621508b3434a3c6d1c0e2544a5
SHA1

84caf1288494277d9e6bbcab18a0b1b6d7f89651
SHA256

ed53e9cd6d04b27dc106ce86172d954d7c58d5d5008299a239f9476bd9458b8e
SHA512

2ffabe3f8bbdd0c8bbbedda8e7853b2fa8a1789f81dabb6afa74b2491f3c52e919e58f75dca08e40e223b360a76b7e62c107bc429a7551fa37afbb070b115187
SSDEEP

768:uwlQoqGP9z2KeLBV/0irpjyZxYiMNXI2iYKYAD3vp1qUjP/H2RFLPxU+btSC:XyPUepuxFeI2itvqr9PxDtSC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca0a4e621508b3434a3c6d1c0e2544a5

Files

ca0a4e621508b3434a3c6d1c0e2544a5
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\jack\Documents\Visual Studio 2008\Projects\Lethal Keylogger FREE Stub\SimpleKeylogsPROStub\obj\Release\LethalKeyloggerStubFREE.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ