Behavioral task
behavioral1
Sample
adc92ef60183a83033d26b67c8b2ce97_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
adc92ef60183a83033d26b67c8b2ce97_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
adc92ef60183a83033d26b67c8b2ce97_JaffaCakes118
-
Size
31KB
-
MD5
adc92ef60183a83033d26b67c8b2ce97
-
SHA1
f76356e544ba18a83e2a4d6edfa4390640e49e30
-
SHA256
d9a2f91ab87503ea0200f6bed73e0bd43b9b00a3a4b21bd1944f201abcc5b677
-
SHA512
264e5995d546d4bd20d24ef9f36df7018b9454bccc6ec998d4ac4296cffe95f16fa69328898b71328c4b88483bfd873b7995e206d476f9653c6b462441cb8850
-
SSDEEP
384:RdVGuSKaNKEu6YTOBX50IoPIyg8tW0xFcGVCT9FANN+a/DstCEqWUnWYzsXwzQOF:Re97KEuA95toQZ8b0aA2Wg86SZ5Q
Malware Config
Extracted
gozi
Signatures
-
Gozi family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adc92ef60183a83033d26b67c8b2ce97_JaffaCakes118
Files
-
adc92ef60183a83033d26b67c8b2ce97_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ