Behavioral task
behavioral1
Sample
JaffaCakes118_6da51d986a7337e319551efff6b3b3f345f2209aa140fadf136fb1004712e530.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6da51d986a7337e319551efff6b3b3f345f2209aa140fadf136fb1004712e530.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6da51d986a7337e319551efff6b3b3f345f2209aa140fadf136fb1004712e530
-
Size
152KB
-
MD5
3860e8b887e21302966c0d17318c4807
-
SHA1
fb0101193147cfe4082bac7c5906ee8c4a56ff10
-
SHA256
6da51d986a7337e319551efff6b3b3f345f2209aa140fadf136fb1004712e530
-
SHA512
14f70d24fb14266f9352364de78cde54872c6304d1952e637e7d5581a3fa39fa34abd95e5dc89b69a40cacf90545836136933f55778b99222b78f4bc1872df33
-
SSDEEP
1536:pa4ZDWxA49C8QGx93tFiWSTvBVb/6rhya6NFvjpiO5BCv+fnn0Kcl:pa4Ziu2x93tFi3VbCNqvfBS+fnnbY
Malware Config
Signatures
-
Snake Keylogger payload 1 IoCs
resource yara_rule sample family_snakekeylogger -
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6da51d986a7337e319551efff6b3b3f345f2209aa140fadf136fb1004712e530
Files
-
JaffaCakes118_6da51d986a7337e319551efff6b3b3f345f2209aa140fadf136fb1004712e530.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ