196cb5dbc0e10ded4bd8cf4a82f003f1_JaffaCakes118 | Triage

Sharing

General

Target

196cb5dbc0e10ded4bd8cf4a82f003f1_JaffaCakes118
Size

3.0MB
MD5

196cb5dbc0e10ded4bd8cf4a82f003f1
SHA1

0510d403f9e963fc70e7d5f869f5cb82b47f1f49
SHA256

d2b6cf75bd0a1065fb3e4b320ba635fc19a98e7dde0e898c92d4a1fbf2d83d43
SHA512

78357e3f34b8d87a73fa12b01d713c3df820b8ed5724143e046120757e9b7e1a0b303b0a18f968186041c82aeabadcbb108378beef98a9ae439ee0acc6f2fdbf
SSDEEP

12288:W3E2CsFX8I5HBZa6qz0f3E2CsFX8I5HBZa6qz:CE2CsFX8Ipe6qzyE2CsFX8Ipe6qz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
196cb5dbc0e10ded4bd8cf4a82f003f1_JaffaCakes118

Files

196cb5dbc0e10ded4bd8cf4a82f003f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Milan\Documents\Visual Studio 2008\Projects\Keylogger v2.0\Keylogger v2.0\obj\Debug\Keylogger v2.0.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ