3d89475e44d5031ab136f88ecd60c464_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d89475e44d5031ab136f88ecd60c464_JaffaCakes118
Size

401KB
MD5

3d89475e44d5031ab136f88ecd60c464
SHA1

702a7dc6577b5ccc876ad882bb1cc862722baca6
SHA256

3ec47b31159fd7fd05c123f1bdeada5602ecdf13c4f713c3fa70c04132ffb3ad
SHA512

9a0b199bf5159317dacb8271470f92e8604cd3df37a44a4b90d3fc4addd95dad5cf8fef9e01935b3128fd6b9b578cdf2babea619ecbd099decc82452184fcdcb
SSDEEP

3072:shdULmDILGkFqCAfHJYxXcZ6jTbMIhLWbx7s02crU14rcfV1deJw0m:bbMmLWbxxUSI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d89475e44d5031ab136f88ecd60c464_JaffaCakes118

Files

3d89475e44d5031ab136f88ecd60c464_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Pierre\Downloads\Compressed\Keylogger_2\Keylogger\Monchesito\Monchesito\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ