Behavioral task
behavioral1
Sample
JaffaCakes118_b64434942c06dfaf130394e972f70c33dc8760cd57a470f1d06bfc09020c20d4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_b64434942c06dfaf130394e972f70c33dc8760cd57a470f1d06bfc09020c20d4.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_b64434942c06dfaf130394e972f70c33dc8760cd57a470f1d06bfc09020c20d4
-
Size
152KB
-
MD5
01328d7bb05209f240419bd48549f199
-
SHA1
f6c9866d5c5056f2b1964f82869f735340b4c86f
-
SHA256
b64434942c06dfaf130394e972f70c33dc8760cd57a470f1d06bfc09020c20d4
-
SHA512
7efd5c62123d138f8c0934845474f83ff7b5b192c1d7b4aa3d23dde16e8358dea78f6899a17df2a443a1a3dff64f0d000f59e203e57449de843404e572c0d955
-
SSDEEP
1536:ppi6WRlMtMveNYurMZX8hRmt1t0FWy/b/6r6FSspiOWB4Vcn0Kcl:ppi6W7cMZMhRmtTy/bCWFRwB4anbY
Malware Config
Signatures
-
Snake Keylogger payload 1 IoCs
resource yara_rule sample family_snakekeylogger -
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_b64434942c06dfaf130394e972f70c33dc8760cd57a470f1d06bfc09020c20d4
Files
-
JaffaCakes118_b64434942c06dfaf130394e972f70c33dc8760cd57a470f1d06bfc09020c20d4.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ