a2249782f9121fe10921c3a21614e8e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2249782f9121fe10921c3a21614e8e7_JaffaCakes118
Size

179KB
MD5

a2249782f9121fe10921c3a21614e8e7
SHA1

c26681afb84b42c04dfff6c669fbe19c6991c513
SHA256

6aa4f0789b509cc188972bcbc5b357e5711a9f81f81c3f8ec8d97caccc309d0b
SHA512

00ab6742520aa57b06cb2ca54c4bd09d402b9e6dededf5e953d8b9627915bac4e3e13c19e38d9fc39f3540833947da37cea6ec02eafffa8d2097d915e4e77c8f
SSDEEP

3072:yUEYc6BzZBxpp5oHjIUK9W8oiqHEX/kTTdgLRoM:yFY5xpilg11

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2249782f9121fe10921c3a21614e8e7_JaffaCakes118

Files

a2249782f9121fe10921c3a21614e8e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\PeterP\Desktop\vbshit\Fixed stub\Advanced Keylogger\obj\Debug\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ