f10c136f398c90275299b2ca98848122_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f10c136f398c90275299b2ca98848122_JaffaCakes118
Size

9KB
MD5

f10c136f398c90275299b2ca98848122
SHA1

2c54ff5633fb3bc31effb854ba087b7cdcdc073d
SHA256

d772c96365c41c7d6aefa192c93862d078a3bf5ca44f0b29df392c3a08d20e67
SHA512

f3831a5cb5a13aefb7b4b360bd331d655a57bd62cf468a567ea207b4000709b2359b57b5b5a354fbddc7408cebbdabaeee4641e74a6ae2059c1c22c698e5e4bc
SSDEEP

96:tP8HUJtyEsHJnnCKBMts+fKGsArWvm6CiGtoq+Oh51pErTcAWBzNt:KbEsc9tlKI+m6czxP0XjWD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f10c136f398c90275299b2ca98848122_JaffaCakes118

Files

f10c136f398c90275299b2ca98848122_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

F:\XeytanKeylogger-master\XeytanKeylogger\obj\Debug\XeytanKeylogger.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ