Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
JaffaCakes118_42b580611bd1f0ead7cad87e0bb2c915bde27157e47177da652f813989893564.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_42b580611bd1f0ead7cad87e0bb2c915bde27157e47177da652f813989893564.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_42b580611bd1f0ead7cad87e0bb2c915bde27157e47177da652f813989893564
-
Size
152KB
-
MD5
3e726276d0031b8f18437f8adec062a3
-
SHA1
97457a55cabd9768668d1aa0ccabd5ae81f189a7
-
SHA256
42b580611bd1f0ead7cad87e0bb2c915bde27157e47177da652f813989893564
-
SHA512
80eaa6ef285842c9e4ebe35e8df03dbfbd50334b3f23a568aa459ad30dcdc1de9879727df40b7d719f80d06d911d1665f4d6d30a102e089267ef9b7210b70813
-
SSDEEP
3072:9PS0189cNDMdjH9I+GMKybCX5wBn5RnbY:LRorGVybtdb
Malware Config
Signatures
-
Snake Keylogger payload 1 IoCs
resource yara_rule sample family_snakekeylogger -
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_42b580611bd1f0ead7cad87e0bb2c915bde27157e47177da652f813989893564
Files
-
JaffaCakes118_42b580611bd1f0ead7cad87e0bb2c915bde27157e47177da652f813989893564.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ