Behavioral task
behavioral1
Sample
JaffaCakes118_9dd97c2f945b612ef7dc7c3235caba293a449c46b5de7c2a7da204e861357eed.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_9dd97c2f945b612ef7dc7c3235caba293a449c46b5de7c2a7da204e861357eed.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_9dd97c2f945b612ef7dc7c3235caba293a449c46b5de7c2a7da204e861357eed
-
Size
152KB
-
MD5
e3cb9cb3442dea6ccfc1d86302ba86b5
-
SHA1
d03602fb2376a71765bb9a7ef9c19b0afede2674
-
SHA256
9dd97c2f945b612ef7dc7c3235caba293a449c46b5de7c2a7da204e861357eed
-
SHA512
4e8cc165f79b465d7fa7e6e1afdd69346b0836a46416c57e3bee6d99a69e18609a41caa8bc94c531f5de9c2b8a6e62b44f3ed2e949b79066449db39c8fe69c62
-
SSDEEP
3072:K5wCXw745KB8q2zGsVdSSbbC/asFdwBzjnbY:EGdsGsHBbxDb
Malware Config
Signatures
-
Snake Keylogger payload 1 IoCs
resource yara_rule sample family_snakekeylogger -
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_9dd97c2f945b612ef7dc7c3235caba293a449c46b5de7c2a7da204e861357eed
Files
-
JaffaCakes118_9dd97c2f945b612ef7dc7c3235caba293a449c46b5de7c2a7da204e861357eed.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ