17718e9ca53cfb440a69be9125c62fdd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17718e9ca53cfb440a69be9125c62fdd_JaffaCakes118
Size

179KB
MD5

17718e9ca53cfb440a69be9125c62fdd
SHA1

10a4dbc9a0ab9b467167eef33033ff77790c1850
SHA256

ec9cee3c66929cb43faa7ed223305cd2cd83f7e3792bc829767c31caf0cfef1d
SHA512

df6c5f29852adc01ad0a33c19ed445e501c513580dc64d06557286c58951852105112a28bf62de20c0f606ba4da35f2a64ee612916a7668e1555f15168f618bd
SSDEEP

3072:yUEYc6BzZBxpp5oHjIUK9W8oiqHEX/kTTdgLRoB:yFY5xpilg1+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17718e9ca53cfb440a69be9125c62fdd_JaffaCakes118

Files

17718e9ca53cfb440a69be9125c62fdd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\PeterP\Desktop\vbshit\Fixed stub\Advanced Keylogger\obj\Debug\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ