62c2affe7d580ce2e5de24776f6032b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62c2affe7d580ce2e5de24776f6032b2_JaffaCakes118
Size

596KB
MD5

62c2affe7d580ce2e5de24776f6032b2
SHA1

62aad75e69567d3b16f6f577725f540f89840fe9
SHA256

cc798cac8438f8c48a1d4ce1b17b916d4d805d872e5e1ec9178bfd3e719f4c43
SHA512

9ad41bf09608a3f09372d6a89bb6cdb1e0570d85fdbd844276e689da1be48bf47e94834c7e361997805c8f5af6c04f25693ad2ef2e4f7780758ed43126a1b9c1
SSDEEP

12288:5ldzkE27P2trTW0C6H9/naSBlTZez8Fr4yvS+qDFWacGYrMhD01:Fgp7P21fC6HVnXl0Wr++2UXrMC1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62c2affe7d580ce2e5de24776f6032b2_JaffaCakes118

Files

62c2affe7d580ce2e5de24776f6032b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\jack\Documents\Visual Studio 2008\Projects\Lethal Keylogger FREE Stub\SimpleKeylogsPROStub\obj\Release\LethalKeyloggerStubFREE.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 564KB - Virtual size: 563KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ