055272082c6d10b96684cb5ca52a3ebc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

055272082c6d10b96684cb5ca52a3ebc_JaffaCakes118
Size

35KB
MD5

055272082c6d10b96684cb5ca52a3ebc
SHA1

3efd59876b40b4a8365b1764004596ea8f669368
SHA256

a58943360ac983f5ad132db371c66b530926a754cbe94c5250cc47bbb81434c7
SHA512

fd752d732d55695a9882a611fff61b58a8857508d3d3cf838e7c325665b06bb054cc3642548a2a645aab88b5cff604f55f8966abd7d67b0a05d1b79fd0419d1a
SSDEEP

768:pt/mP4HibvPzPV37/LfhtJK6RAhsQcV97zrAiDnXA:p9mPl3N/L5tohsQcV97zs0w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
055272082c6d10b96684cb5ca52a3ebc_JaffaCakes118

Files

055272082c6d10b96684cb5ca52a3ebc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Hack\Keylogger\JuShare 1.0\JuShare 1.0\Stub\Stub\obj\x86\Release\c3R1Yg==.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 133B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ