b0763742148f819d37ed57a9a9b4b194_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0763742148f819d37ed57a9a9b4b194_JaffaCakes118
Size

106KB
MD5

b0763742148f819d37ed57a9a9b4b194
SHA1

22d64e9476d75f5d929350417bde98eb2c2361ad
SHA256

4085008ccbe5c672fe1b5335983131d92ce6f136f1ee7cfcf0447d4a89990b3d
SHA512

e71b237d8b92fca2e8003dc13faa3abc5ea2169b48d389345bb8a25dbceae41e516031fc75f5386bcf656fa934a5f8126fc7f8832746edf526cfe7ac5e1ee666
SSDEEP

768:vnc0OqWHsNCB6dFPgOCsudzjkO2mVqC75mCDYtBc3Rr0kJFXyQNmAm9U/1:vc0Jo6dNgpzUPC75mCDSB80MmAm9U/1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0763742148f819d37ed57a9a9b4b194_JaffaCakes118

Files

b0763742148f819d37ed57a9a9b4b194_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\My Documents\Downloads\Compressed\keyloger1\[HMO] 541_s Keylogger v3.0 [SOURCE]\Stub\Stub\obj\Debug\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ