Behavioral task
behavioral1
Sample
JaffaCakes118_999281248c12680b3fbd258edef980e53a17ad42d0c17cfcf3ab76ec1fe32fc5.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_999281248c12680b3fbd258edef980e53a17ad42d0c17cfcf3ab76ec1fe32fc5.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_999281248c12680b3fbd258edef980e53a17ad42d0c17cfcf3ab76ec1fe32fc5
-
Size
152KB
-
MD5
02bf42e1f972174fd6a85f3fd04dee70
-
SHA1
18811822a13aaaaf7554d4a3a8b57b1d2300a121
-
SHA256
999281248c12680b3fbd258edef980e53a17ad42d0c17cfcf3ab76ec1fe32fc5
-
SHA512
7660393e8f71aa84dcfaf6fcd2519bfb0a42f07864658bfab7a613d07d80ffd2563c7a71057dd70812894a4f19ec3e21cfb4e77131ff49a7a08684e13754aae7
-
SSDEEP
1536:IFlAi3bCo1sI4SSGP0NZu0eLTxJ/ztjvz2p58In01reb/UrZUy0piOWBl:IFlAi/s+PkZu0eLTDd2pSI05eb8YwBl
Malware Config
Signatures
-
Snake Keylogger payload 1 IoCs
resource yara_rule sample family_snakekeylogger -
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_999281248c12680b3fbd258edef980e53a17ad42d0c17cfcf3ab76ec1fe32fc5
Files
-
JaffaCakes118_999281248c12680b3fbd258edef980e53a17ad42d0c17cfcf3ab76ec1fe32fc5.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ