afcc76042cd4b4d448b9de6ce0b52816_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afcc76042cd4b4d448b9de6ce0b52816_JaffaCakes118
Size

48KB
MD5

afcc76042cd4b4d448b9de6ce0b52816
SHA1

887d04479a572b99f275d5a5bac247db896b9060
SHA256

3be5112f5d169f5e434ee799d1e25f6ac728e28f3b5687cc0f177b1c46adc012
SHA512

16ccc14a1a43d86469059f851f5d724043592b62203faf4ebeffea5abc914b4417cc68f2da8c70b67d02936e5a7387a40b800c17c37dea025e158f7a8c0d3ba4
SSDEEP

768:G3IqngEOOZRYxvwCrl/A+1wv8s3i6E5nXfUWPYfIc/Qi3qEBQp0:G3IKbOOmxA+1C3i6EBXlLOUp0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afcc76042cd4b4d448b9de6ce0b52816_JaffaCakes118

Files

afcc76042cd4b4d448b9de6ce0b52816_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Programming ~ VB.NET Source Codes & Themes\YamiLog - Keylogger\YamiLog\KEYLOGGERSUB\KEYLOGGERSUB\obj\Release\Windows Updater.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ