Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
JaffaCakes118_d8db092ba153772a84e8d263506a5dc272651da9df5dd722900097cdfbcfc2b4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_d8db092ba153772a84e8d263506a5dc272651da9df5dd722900097cdfbcfc2b4.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_d8db092ba153772a84e8d263506a5dc272651da9df5dd722900097cdfbcfc2b4
-
Size
152KB
-
MD5
c29e795be6c43528eab4590ecaeb143a
-
SHA1
7cb3d571ff664a82f7251503a1b115bac447a0ed
-
SHA256
d8db092ba153772a84e8d263506a5dc272651da9df5dd722900097cdfbcfc2b4
-
SHA512
ca0029ca3f26c472bd313f5d885d52da4f8a97fd3d554e7c51f493b756da8de250052c75f7180aa395abb91916879d8f23405a777b0c723e804f0472b4b19dc5
-
SSDEEP
1536:0FlAi3bCo1sI4SSGP0NZu0eLTxJV0ymNR5w2F+69b/UF5xjX+QbpiOWBl:0FlAi/s+PkZu0eLTJ0LFvb81rzwBl
Malware Config
Signatures
-
Snake Keylogger payload 1 IoCs
resource yara_rule sample family_snakekeylogger -
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_d8db092ba153772a84e8d263506a5dc272651da9df5dd722900097cdfbcfc2b4
Files
-
JaffaCakes118_d8db092ba153772a84e8d263506a5dc272651da9df5dd722900097cdfbcfc2b4.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ