Behavioral task
behavioral1
Sample
JaffaCakes118_87ba0fdc43903bc6585271609f638b225b91c9f5a1f13cd1f047d943394b779d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_87ba0fdc43903bc6585271609f638b225b91c9f5a1f13cd1f047d943394b779d.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_87ba0fdc43903bc6585271609f638b225b91c9f5a1f13cd1f047d943394b779d
-
Size
152KB
-
MD5
8aa9fcd351fc84323eb5f033310dbb37
-
SHA1
e3e9bf23c85811f06681666ebaed5ea88c62cb46
-
SHA256
87ba0fdc43903bc6585271609f638b225b91c9f5a1f13cd1f047d943394b779d
-
SHA512
9060c3e5db1cf1f2fb49dfdf78006b788bf456c9e7c6a801b891ebb12579f1454f864daf7bae0f6f6a17bc06db7bf0cb5b2bf2bbd77f753fd3e2e7dd52849546
-
SSDEEP
1536:2a4ZERmnV9aSjtohZf94q28+fNWNX6Dcb/6WEPIXVxpiOWBP:2a4ZxDohl94q2p9cbCtPIFjwBP
Malware Config
Signatures
-
Snake Keylogger payload 1 IoCs
resource yara_rule sample family_snakekeylogger -
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_87ba0fdc43903bc6585271609f638b225b91c9f5a1f13cd1f047d943394b779d
Files
-
JaffaCakes118_87ba0fdc43903bc6585271609f638b225b91c9f5a1f13cd1f047d943394b779d.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ