44b7601b733211bd32e6519112ae8251_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44b7601b733211bd32e6519112ae8251_JaffaCakes118
Size

201KB
MD5

44b7601b733211bd32e6519112ae8251
SHA1

b81c82fc513cf14bd038fefa9bde85083b5b3805
SHA256

a9efd25ba6ec5c83a39f598a17bf95c168212f412a1493a53705fcde5a0f280a
SHA512

c362fdc76ae57149e6d07519f50162bb79de0edab54409cd3ee93d53f483465abc95f7336ca6f1dd1618eadf10c6b7fa9bf81bfbd5f3289ae99caf0d8b9812b1
SSDEEP

3072:NejlLAUr08Vi7SmKWoWG7RRETY9MVrrBVJQ9d17SAORUDzaK4cu:bQ7E93u9GTM2c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44b7601b733211bd32e6519112ae8251_JaffaCakes118

Files

44b7601b733211bd32e6519112ae8251_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\gcc\Documents\Visual Studio 2010\Projects\Unknown Logger V Public\Keylogger GUI\obj\x86\Debug\Unknown.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ