C:\Users\28718\Documents\GitHub\DcRat\Binaries\Release\Plugins\Keylogger.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Keylogger.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Keylogger.exe
Resource
win10v2004-20240508-en
General
-
Target
Keylogger.exe
-
Size
10KB
-
MD5
29104fc09f07bfe4dbb67b1158c295e4
-
SHA1
4386610fd26b3c146838fb321626fcf776e2c803
-
SHA256
4d8c478eb9b6d2128be7d43be944b125700a8f505ef7951679c974617898a03c
-
SHA512
d72ef8d451cb49ae7af84811f1f2d785390fce36bcfa544505647ab123e506975f5fbd8bdeb17706a497e2a705a5d0aaf6f6058e54dac26724ff8439f3cbf928
-
SSDEEP
192:jtmcuq6MYDxi4maEYbRzmEsLkTgv5JHTZeJYHcwY7fazhEi:jtlF6MWE9rUhVsL15pZrYylE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Keylogger.exe
Files
-
Keylogger.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ