Behavioral task
behavioral1
Sample
025828dcacd55d53617fec83dcfefb22_JaffaCakes118.exe
Resource
win7-20240419-en
General
-
Target
025828dcacd55d53617fec83dcfefb22_JaffaCakes118
-
Size
6.8MB
-
MD5
025828dcacd55d53617fec83dcfefb22
-
SHA1
d02c19b95007a706be59fa3815c26a74e3abab57
-
SHA256
1d8b8237a55fc99c413d3fc5711c318408267d1ea0d7c1ec89c5d10d5c41e678
-
SHA512
adf72fee10fb1c4f10496878bc137b8e8227f279fcd1d0c1d5655c11af07e34b3f980e1001c35684ac97e3153046a6e6f25bce5875c0e707e85fa079ea38a19f
-
SSDEEP
98304:o7+akjAyFdm5suUjui/GRW4Y4HBKL/vaAjkq9FWL794:4+aknuUXEW4YKQaKkOWLp4
Malware Config
Extracted
gozi
Signatures
Files
-
025828dcacd55d53617fec83dcfefb22_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 8.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE