Behavioral task
behavioral1
Sample
fb26030b510e34b87d21fa1db5faab74_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb26030b510e34b87d21fa1db5faab74_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb26030b510e34b87d21fa1db5faab74_JaffaCakes118
-
Size
11.7MB
-
MD5
fb26030b510e34b87d21fa1db5faab74
-
SHA1
695cb2f941a42cdb02dabb1fbe55e314e3380996
-
SHA256
16a434154df62d4d399befd2dbcb4371aee542ed034de77edce2ee6570d4bdab
-
SHA512
4d90d4d1f72242d251463dac6308b326dc1e7665dffa08151e5214e579900d5c99e14df3aa85a35091774bbbf433f0b1e99d225d3ef885a882533ac48b4d238b
-
SSDEEP
196608:V4yNIY51bWCcXf3o2WCfuuoWCcXf3o2WC:egI8+ffZuuo+ff
Malware Config
Extracted
gozi
Signatures
Files
-
fb26030b510e34b87d21fa1db5faab74_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE