Behavioral task
behavioral1
Sample
JaffaCakes118_1ccc4b50a35fffe6d4adc67edcd66ea0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_1ccc4b50a35fffe6d4adc67edcd66ea0.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_1ccc4b50a35fffe6d4adc67edcd66ea0
-
Size
33KB
-
MD5
1ccc4b50a35fffe6d4adc67edcd66ea0
-
SHA1
ae59b4d3dc097d076a25babf69fd42949be1ea78
-
SHA256
ca2e70225952e6aeb99cf6fb13676d6c7fabaf827f1872a8d550db9e14ce49be
-
SHA512
48ba8a1f890ad69d06d7bcabfb44c33e4f03ad90fc4706abb2d6ece26996aa31831fa2cf18c7200ca696542ce0485bc34d925a2f65ce1d7091f58e8e5241b78d
-
SSDEEP
384:1+a+qRDRFHXU9Kceb4or+EikMRTHV0lTEZEEZeaCfmDsFI3:+qhRJczy+EixTHV0lgZLe/MsFk
Malware Config
Extracted
gozi
Signatures
-
Gozi family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_1ccc4b50a35fffe6d4adc67edcd66ea0
Files
-
JaffaCakes118_1ccc4b50a35fffe6d4adc67edcd66ea0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE