Behavioral task
behavioral1
Sample
05788eee9fb0a726ccfc290c3b2cf7b61e209e3371741ca8ea3c80425e2d3171N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05788eee9fb0a726ccfc290c3b2cf7b61e209e3371741ca8ea3c80425e2d3171N.exe
Resource
win10v2004-20241007-en
General
-
Target
05788eee9fb0a726ccfc290c3b2cf7b61e209e3371741ca8ea3c80425e2d3171N.exe
-
Size
152KB
-
MD5
aeda9eb05fd4374dea6fdd65991755d0
-
SHA1
de866e0e998ded5e1b1de7c91fe267790d48902c
-
SHA256
05788eee9fb0a726ccfc290c3b2cf7b61e209e3371741ca8ea3c80425e2d3171
-
SHA512
b7f1a148ecdaa5efbdb7c6ddd6b831cb538c045af6aa824fae66175e7a217c9e73758de25338ed7b39507e5d1828ecb42e618553e7e4277fe241aa64ce68275d
-
SSDEEP
3072:da4Zxn8Y19TBP6GZSybVbCYyBiwBZHnbY:l7AGk2bjyBfHb
Malware Config
Signatures
-
Snake Keylogger payload 1 IoCs
resource yara_rule sample family_snakekeylogger -
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05788eee9fb0a726ccfc290c3b2cf7b61e209e3371741ca8ea3c80425e2d3171N.exe
Files
-
05788eee9fb0a726ccfc290c3b2cf7b61e209e3371741ca8ea3c80425e2d3171N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ