5bd771be5d5fd823d7eacb5da94ff165_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bd771be5d5fd823d7eacb5da94ff165_JaffaCakes118
Size

65KB
MD5

5bd771be5d5fd823d7eacb5da94ff165
SHA1

177f0175c205777aae1029bd66f5110d94b09e52
SHA256

c9e8a0a563760160f7c3ae718d8b959bdb58b54f77667b7d1b0fd8431032cc7a
SHA512

3f9b105ef9f80d46ddd86b557832e1d20b411b2a7d5e1fd8ff9fb4857c7be42c4f6c4b5a6fa67e17e4c7b57528e162a5b8633c6de52d34efb6ecc10e1cda6c65
SSDEEP

768:DdvK2yenpZOaXLxYc9jZetuQflCemDghlnBcOAIOoBF0UgGezYcCe:DdvK+xXPoFhmuB6IOoX0hG8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bd771be5d5fd823d7eacb5da94ff165_JaffaCakes118

Files

5bd771be5d5fd823d7eacb5da94ff165_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\matrix\Desktop\Uyit Mase Keylogger v 1.0\uyit mase keylogger\stub server\Yahoo! Mesengger\obj\Debug\Microsoft Corperation.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 187B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ