Behavioral task
behavioral1
Sample
JaffaCakes118_3c44aa63ba563fcd93e53589b424cdac.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_3c44aa63ba563fcd93e53589b424cdac.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_3c44aa63ba563fcd93e53589b424cdac
-
Size
85KB
-
MD5
3c44aa63ba563fcd93e53589b424cdac
-
SHA1
d860b7faed1bfbb373db5ec2c0e36d45cb56cd4f
-
SHA256
265f65ef1529e1e11af3ee5879fbaa7f4247f4c0b6abd15185640ae2c0639de0
-
SHA512
ae02b84f573bbac5c8f63b3e612c88a766cc715e8f35534c3fa821dc4af3c630ad7d2810ec95fcb307c21a01233b2a15a0c01088af3825acb7db576d13157be5
-
SSDEEP
1536:3qp2oQrAPHV4X/42dX49uSxNy5fuAOKzxiTQCF+oIjVhhPoSeFBd:3qp6X/4eI9RNZAOKCQp5hhPo9Fv
Malware Config
Extracted
gozi
Signatures
-
Gozi family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_3c44aa63ba563fcd93e53589b424cdac
Files
-
JaffaCakes118_3c44aa63ba563fcd93e53589b424cdac.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ