6ff6df61febe8879506acc0ac66f725d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ff6df61febe8879506acc0ac66f725d_JaffaCakes118
Size

13KB
MD5

6ff6df61febe8879506acc0ac66f725d
SHA1

4bf7caf0fd7f07033be41c1f90c9f5339a81e5bc
SHA256

c59df06745d0ef622ed3915a7ebcf86000e7ddf81f6c478d6f98b6ed669b519b
SHA512

754298f74e1a473dfa89e2c5b4270a694458138b9542e09d00b603472da93aefe80aacc51fc35030e1673bc63d650013c2f9e7b46ac85913ca14035de8aabc18
SSDEEP

192:yoNW+0FlOM0w1P475/iIUmehpa/P4FGZ6P1h2PWaN:9WOMPR475KSeXIQFGZBWa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ff6df61febe8879506acc0ac66f725d_JaffaCakes118

Files

6ff6df61febe8879506acc0ac66f725d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Kevin\Documents\Visual Studio 2008\Projects\WinForms\KeyLogger\obj\x86\Debug\KeyLogger.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ