26f9b7aee9f5d29a756d7164d88851a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26f9b7aee9f5d29a756d7164d88851a3_JaffaCakes118
Size

330KB
MD5

26f9b7aee9f5d29a756d7164d88851a3
SHA1

26fae3212f900e143d239d67d6afb6d1389ddd37
SHA256

84d2a0e195d43da3508deae69058ca5f718eb0f0b60b190871365001d70f98b4
SHA512

3f8c7960df67b4bcaa22a39dc9b66507962347e226b1de3a5c03230c35b32ec5d1a479d870a52b5e923e40eef9e3742f8c4727830b42dc6f15e7aacbdcbe7835
SSDEEP

3072:WU4SFfAkRhC5lEMZppQLUiRZKORb65N9x5O0Maoziv2uo:We/hC5yMZwggdaQ01qf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26f9b7aee9f5d29a756d7164d88851a3_JaffaCakes118

Files

26f9b7aee9f5d29a756d7164d88851a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Darrian\Desktop\Keylogger Stub\Keylogger Stub\obj\x86\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ