310e39fd2b8868e562dbe18565d2351a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

310e39fd2b8868e562dbe18565d2351a_JaffaCakes118
Size

482KB
MD5

310e39fd2b8868e562dbe18565d2351a
SHA1

6a9a1d1c14e5669889ea181e96b0afb7ddc94f59
SHA256

57bd02d0b9b5df6f4504f3cd907868a4f5dd136caabd4f3befc411d030742649
SHA512

68b36bfda6ddc3645dd4210ce5054d369c2e8bb08726ae6161cf8638a6e11a23ed49b80ea8f6842e3993bab6aa2be1102f4562c378ed39c26cdbed85c6e6a676
SSDEEP

6144:40jUca5+gfpUOiQLTTwBCtaJppYWH/JskNAVNeN584eeD14ootXCAlACP:40Yco+gunQUBCEAWfykqVNeN24ezlAu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
310e39fd2b8868e562dbe18565d2351a_JaffaCakes118

Files

310e39fd2b8868e562dbe18565d2351a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\$@!\Computers\Program Source Codes\541's Products\541's Keylogger v7.0\Stub\Stub\obj\Debug\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 463KB - Virtual size: 463KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 155B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ