Behavioral task
behavioral1
Sample
JaffaCakes118_e5d90d61656f5443f7b81978a7ba86219a2263512576b2ef907581b642a386f2.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_e5d90d61656f5443f7b81978a7ba86219a2263512576b2ef907581b642a386f2.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_e5d90d61656f5443f7b81978a7ba86219a2263512576b2ef907581b642a386f2
-
Size
152KB
-
MD5
d66df4560ac7c58defbfbb2585adbb07
-
SHA1
cd2f939ad1919077611dab03b199be27298fa780
-
SHA256
e5d90d61656f5443f7b81978a7ba86219a2263512576b2ef907581b642a386f2
-
SHA512
37098c1ca8a18268fbbd5286094bf2179054863b076aad31ec37717232b21832edcec240f0f733041c65d6000b6b63b0bbf1fd4b1da0a6d9c37fbc8f71cb2c6e
-
SSDEEP
1536:+a4ZERmnV9aSOW8YOk9TB7RTUuggCUTb/6YqKt+dbbxpiOWBZ:+a4Zxn8Y19TB7NUvHUTbCdKtwfwBZ
Malware Config
Signatures
-
Snake Keylogger payload 1 IoCs
resource yara_rule sample family_snakekeylogger -
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_e5d90d61656f5443f7b81978a7ba86219a2263512576b2ef907581b642a386f2
Files
-
JaffaCakes118_e5d90d61656f5443f7b81978a7ba86219a2263512576b2ef907581b642a386f2.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ