16f4f9e9f8e163e8d3e081412fc7dada_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16f4f9e9f8e163e8d3e081412fc7dada_JaffaCakes118
Size

92KB
MD5

16f4f9e9f8e163e8d3e081412fc7dada
SHA1

69caa18f580e2aff227e8dcdfc01adc2d763f823
SHA256

b059d261e6306299673490776724fbf059e071b99386425cfd69331a104df9c0
SHA512

3d7816c042a68a0c7a6552f99d40d1321cd49d2b86f3ab89dada4f7f18a4fa4c0c17c858bd6adf8af4920c8bfe4b1d4d9f9dbd966802080e421bd78d3d5cf7e7
SSDEEP

1536:q23i1akNPGRb24yyEu3drwHSKKLuy1l+123i1akNPGRb24yyEu3drwHSh:hiVNPGR01UMG+CiVNPGR01Uv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16f4f9e9f8e163e8d3e081412fc7dada_JaffaCakes118

Files

16f4f9e9f8e163e8d3e081412fc7dada_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Special Soft\VB + PHP + Tutorial\Mix Projects ( All )\Keyloggers Projects\Keylogger\check keyloger\obj\Debug\winlogon.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ