vipkeylogger | baf492ce1891725d1d42490077998666b85938b0cb839302b5761a30cca16d7d | Triage

Sharing

General

Target

baf492ce1891725d1d42490077998666b85938b0cb839302b5761a30cca16d7d
Size

602KB
MD5

d23e04769d75e0d671cf24f336e4d5f0
SHA1

e3b20356ea748b644981ceee21663e524471d8e8
SHA256

baf492ce1891725d1d42490077998666b85938b0cb839302b5761a30cca16d7d
SHA512

50a4084fa967ac5eb22e19a7466c7b8cf4d116a2877b5b96b2b65607c3bb3529f4384d8d7a58719d210ea7b6432d786caf45838c99a52e760b63fb191831fc7c
SSDEEP

12288:lw+oB/14LIjVQngDDKQSUEk8HkuMaLf6T5+gJsUJ1xQ6XGR:TYTNSUEJ

Score

10^/10

keylogger stealer vipkeylogger

Malware Config

Extracted

Family

vipkeylogger

Signatures

Vipkeylogger family
vipkeylogger

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baf492ce1891725d1d42490077998666b85938b0cb839302b5761a30cca16d7d

Files

baf492ce1891725d1d42490077998666b85938b0cb839302b5761a30cca16d7d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 596KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ