770d0b658974b7ab6d14940c77953eab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

770d0b658974b7ab6d14940c77953eab_JaffaCakes118
Size

93KB
MD5

770d0b658974b7ab6d14940c77953eab
SHA1

a0f99ffd9669c161422da308392ba9e6fdcce186
SHA256

41885d83c5cee7c3364c951af836a99e2e45f7a7b94f029aec2b12e37f6cdc09
SHA512

a4bd0cb7a5c47f79cdec4bd3408748bbbbadbbe970d7d54efffb6531c8a3ae5bc6987ce95c658df948c57b82cd9e4e3df3c713b32b52c2449457fbf919ab2984
SSDEEP

1536:TZUU0UIHJ93KpO0FIoWRVUsAsSiZUU0UI:gP3KI0FIoWRVUsAsS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
770d0b658974b7ab6d14940c77953eab_JaffaCakes118

Files

770d0b658974b7ab6d14940c77953eab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Leon\Documents\Visual Studio 2008\Projects\Apolyse Keylogger\Apolyse Keylogger\obj\Release\Apolyse Keylogger.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ