2818956360e23de7975816074cfb622f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2818956360e23de7975816074cfb622f_JaffaCakes118
Size

9KB
MD5

2818956360e23de7975816074cfb622f
SHA1

3f60ffe4a07d9c77a821b5e942e2e9c36c7a555c
SHA256

9f3e7d3b6cd9a851183b8c62085776fabb99feb37f4d407cb3b2a0806642beec
SHA512

8c2f71a88a3e69f62fcc2c95e64abcd192ff804213a0ea1070a1ee726660a97e2e15eaeea25f0874d36b1ef5c78ec3bf2c5aa6d9207b199b0e1292d17811c1df
SSDEEP

96:QlvOaF+JFM8xggRWCOv9qDDZtVOwXuJbigEDRasCQihZt2frzM4hjy+yLK/7t64j:wIL8Ev9OwgeJDRaqbvrBqKjN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2818956360e23de7975816074cfb622f_JaffaCakes118

Files

2818956360e23de7975816074cfb622f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Ryan Hughes\My Documents\Visual Studio 2008\Projects\Keylogger\Keylogger\obj\Release\Keylogger.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ