Behavioral task
behavioral1
Sample
103a981c133ab1fe37fbc3a0dd58c44af19da91a9374f9764bcec3c9b950e286.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
103a981c133ab1fe37fbc3a0dd58c44af19da91a9374f9764bcec3c9b950e286.exe
Resource
win10v2004-20241007-en
General
-
Target
103a981c133ab1fe37fbc3a0dd58c44af19da91a9374f9764bcec3c9b950e286.exe
-
Size
152KB
-
MD5
5b60a5a80c815e099370923a652a959c
-
SHA1
143ff7c361728162dceccc1afbab16652183a87b
-
SHA256
103a981c133ab1fe37fbc3a0dd58c44af19da91a9374f9764bcec3c9b950e286
-
SHA512
3cb0e3a4d25b7d2cb640beb0833c589ce5a03b6e64bae53aab6d399f4c92bdcda0ebba366732722ef62b9f830f521d6921cc8c9f27b1a0ac2b318d88a64fd04a
-
SSDEEP
1536:2a4ZERmnV9aSOW8YOk9TB1AjJsUjkgyb/6CdAj5L8piOWBZLn0Kcl1:2a4Zxn8Y19TBVUybCsA1LWwBZLnbY1
Malware Config
Signatures
-
Snake Keylogger payload 1 IoCs
resource yara_rule sample family_snakekeylogger -
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 103a981c133ab1fe37fbc3a0dd58c44af19da91a9374f9764bcec3c9b950e286.exe
Files
-
103a981c133ab1fe37fbc3a0dd58c44af19da91a9374f9764bcec3c9b950e286.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ