Behavioral task
behavioral1
Sample
JaffaCakes118_572deaaf80cda990e1e075ea95efa0817ab170793a88a8ad39f30f0e436ef495.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_572deaaf80cda990e1e075ea95efa0817ab170793a88a8ad39f30f0e436ef495.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_572deaaf80cda990e1e075ea95efa0817ab170793a88a8ad39f30f0e436ef495
-
Size
152KB
-
MD5
07d1f5f98ba1acdf76fc888ea2345624
-
SHA1
df0bb86b542f6d6d5496b6384e924a96eddddf4c
-
SHA256
572deaaf80cda990e1e075ea95efa0817ab170793a88a8ad39f30f0e436ef495
-
SHA512
de07943e6f4a00d5a034c60dbb8b0940928778f47af4205581748c59a2b815355f91d66e186f889e1cd136076a225271d8b0024ed12a40bc448c1f14a4444e23
-
SSDEEP
1536:gEwm5p7siIoczBMe3HcrVga6uc6V1yg3eCafb/U9tUuGZpiOWBA:gEwmvs0czBMe3HGlV1yg0fb8LUtwBA
Malware Config
Signatures
-
Snake Keylogger payload 1 IoCs
resource yara_rule sample family_snakekeylogger -
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_572deaaf80cda990e1e075ea95efa0817ab170793a88a8ad39f30f0e436ef495
Files
-
JaffaCakes118_572deaaf80cda990e1e075ea95efa0817ab170793a88a8ad39f30f0e436ef495.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ