470f26aec3a1cb539896e998fed8887c_JaffaCakes118 | Triage

Sharing

General

Target

470f26aec3a1cb539896e998fed8887c_JaffaCakes118
Size

19KB
MD5

470f26aec3a1cb539896e998fed8887c
SHA1

572aefb0fc94c715b6e641ed9c9951a816989dcd
SHA256

a6ce72efc7b64650ff54abe2b1e965ec543a210eecda6353f015da5bd61ce8e6
SHA512

b283243d9640c175a4022548bee3a91c7ad50a3361472706c2cd283f0c58558b0496eb788955addbfcd3a4f645fb00063a0fcec7db7d652cf9dae13700da7eb6
SSDEEP

384:taByN+rwj8qxV25Gc7Lf45sG6oQfro8fE511mj:oB65T2R/lG62oj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
470f26aec3a1cb539896e998fed8887c_JaffaCakes118

Files

470f26aec3a1cb539896e998fed8887c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\ItchyFingerz\Desktop\Program Projects\Tiny Keylogger\Stub\stub\stub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ