3dff3591607524abcc7877fb74b96e56_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dff3591607524abcc7877fb74b96e56_JaffaCakes118
Size

304KB
MD5

3dff3591607524abcc7877fb74b96e56
SHA1

d766520871b7c4413712c96d7b3517d889a91ae7
SHA256

b14043b291e3544a182ca86b536ec97402fd0421f2adc9645cd7cdaeedca170e
SHA512

0908ad424b1bee9844b5b6f9841b69d5a77dec097fdb9c506bc3960a16104bfcc9832c42b3a552351046ed025385aa96b39207b901ba34ba6e2a9d8fe6f596bf
SSDEEP

1536:TufCfehQwQnv+53+rlOLvHrfdUNleU/WtlgDFq63Iu:TufYec253+YLvL+NInDgDFq63Iu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dff3591607524abcc7877fb74b96e56_JaffaCakes118

Files

3dff3591607524abcc7877fb74b96e56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Anubis\Desktop\Fixed stub\Advanced Keylogger\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 127B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ