Behavioral task
behavioral1
Sample
JaffaCakes118_67877ef13ea91c5459ee62409ea2ff76a71b2407f40187dd9e000944b105a865.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_67877ef13ea91c5459ee62409ea2ff76a71b2407f40187dd9e000944b105a865.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_67877ef13ea91c5459ee62409ea2ff76a71b2407f40187dd9e000944b105a865
-
Size
144KB
-
MD5
ab7a1604924fff3a8a66fb45e44a035c
-
SHA1
a67486501b68aee52901c8ec138988d6e0617e92
-
SHA256
67877ef13ea91c5459ee62409ea2ff76a71b2407f40187dd9e000944b105a865
-
SHA512
720d1d7b8b90541e9f7476c7cd8162267d4ca5f3167ce9b5d33ef733745a7370f9b1158e872a4889a393e40e8cba2fd21042b3929b60af15fbe14d4f90b9b291
-
SSDEEP
3072:1pEhgjbxor2V1iD2N8hrX1ELLexMxbSKpwB+F:Ic1i6N8VWHsMxb3F
Malware Config
Signatures
-
Snake Keylogger payload 1 IoCs
resource yara_rule sample family_snakekeylogger -
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_67877ef13ea91c5459ee62409ea2ff76a71b2407f40187dd9e000944b105a865
Files
-
JaffaCakes118_67877ef13ea91c5459ee62409ea2ff76a71b2407f40187dd9e000944b105a865.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ