fe84b5984cd813e17829378b5f6664b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe84b5984cd813e17829378b5f6664b7_JaffaCakes118
Size

204KB
MD5

fe84b5984cd813e17829378b5f6664b7
SHA1

a3cd058e51d2a804f122fb41d04e19f8fffbe0af
SHA256

93ba778d3e172682acdbe0fa4b40d9984ab6ae54611079cafc42225582e2073d
SHA512

1f15febbf3730ce2f07830ba3fa57d38188cbf4a2ac81fc3ffc76c66d9d390b7e46e5922c5df6f8043e4a0cad496ed21bec6b1cc36f97226c4b00b390b75655f
SSDEEP

3072:7Y5vifj+6I128gffPSfF22Gb4DDOzmddnwXXXjRR4u9ZDt:Vjj8gffPSfF22s4DDSmddnwXXVlZJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe84b5984cd813e17829378b5f6664b7_JaffaCakes118

Files

fe84b5984cd813e17829378b5f6664b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\My Documents\Visual Studio 2008\Projects\Keylogger v1 by hav0c1995\Stub\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ