Behavioral task
behavioral1
Sample
JaffaCakes118_db9b20fea0305a591c55706948a55d0e7461e58b117729e5230e2e31bfc1aae8.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_db9b20fea0305a591c55706948a55d0e7461e58b117729e5230e2e31bfc1aae8.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_db9b20fea0305a591c55706948a55d0e7461e58b117729e5230e2e31bfc1aae8
-
Size
496KB
-
MD5
1339a1bd582cce6a59f1bb8c5bf0f459
-
SHA1
daede0667944d422ff07a8112e00345d43ec4cfb
-
SHA256
db9b20fea0305a591c55706948a55d0e7461e58b117729e5230e2e31bfc1aae8
-
SHA512
8e9cf1eac62818571ae07da146228416f1c8267e0ad55f6cdcd2a3e33c04cb8000bb5523f4f7813f031cea7e30b3ae33f8b297a611a6cb4734c9f59771192a84
-
SSDEEP
6144:sCqVNE3j73DSuYii6NTb5Hijz9y/2EbAVfOjU0nXgXLZF1uUpBHlK+XOOqz5N1GT:sp3E3HDei3oXA2jCXgXLz/HQOqzjW/N
Malware Config
Signatures
-
Snake Keylogger payload 1 IoCs
resource yara_rule sample family_snakekeylogger -
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_db9b20fea0305a591c55706948a55d0e7461e58b117729e5230e2e31bfc1aae8
Files
-
JaffaCakes118_db9b20fea0305a591c55706948a55d0e7461e58b117729e5230e2e31bfc1aae8.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 468KB - Virtual size: 468KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ