252e864b72b435aaeccba3275fba0c30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

252e864b72b435aaeccba3275fba0c30_JaffaCakes118
Size

462KB
MD5

252e864b72b435aaeccba3275fba0c30
SHA1

a6283ce68ed92cf8ccaee92dfeb42c38ac49f669
SHA256

44320bb54e5454c4242ab61fd5fc0497087571c651aebb929b9012972ca9f283
SHA512

c7252f6c2f79fa6ea46fa4b5a380e3c7c1e6c29983919d92ba134920e43138a6e66f5c446cfe155a6eadc41d39cd3079bf1207175b86d0c0250985dce1c57ec4
SSDEEP

3072:M7Y51JeygU0dIQriu8c3gaQlsYJWhW9dBTCgQgl:Nexxagiu8c3gaQPohW9dBL1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
252e864b72b435aaeccba3275fba0c30_JaffaCakes118

Files

252e864b72b435aaeccba3275fba0c30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\craizer25\Desktop\builder\Fixed stub\Advanced Keylogger\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ