3d6b079f3b9c19de653c25b55282b7e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d6b079f3b9c19de653c25b55282b7e7_JaffaCakes118
Size

96KB
MD5

3d6b079f3b9c19de653c25b55282b7e7
SHA1

2775fa24b7ae7d8256d66c1f66704e1d56b50d8a
SHA256

172286130b9bf013ad97f2d22cab021ed7fb55e1a31fd24a25c0581eec22ce95
SHA512

1837cefe8d2a853ab7994a26aa9a790e954947aeb5d189d9493e2aef436c9e0a8fd13cf6dc7545df2493495fbcb6905892b321893dc618dbffbde9e3a970a7d4
SSDEEP

768:Ndw1nil0OT+D7chMSqcObKqCJI/oZI3v4VnhWIUB1TKC1xsN:NdwQmcpqjKqCJI/l/YlUBxn8N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d6b079f3b9c19de653c25b55282b7e7_JaffaCakes118

Files

3d6b079f3b9c19de653c25b55282b7e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\GOGO\Desktop\penjat Keylogger v.10\Server\Server\obj\Debug\Windows.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ